CyberRota Analysis
AI-GeneratedPrestaShop version 8.2.1 is vulnerable due to improper sanitization of the 'Alias' parameter in the 'Update your address' function, allowing attackers to inject malicious expressions. This flaw can lead to unauthorized access to personal data when users export information via the 'Get my data in CSV' tool. E-commerce platforms and businesses using this version should prioritize addressing this vulnerability to protect customer data.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In version 8.2.1 of PrestaShop, there is a vulnerability relating to the incorrect sanitisation of elements, caused by inadequate validation of the ‘Alias’ parameter in the ‘Update your address’ function. This flaw allows an attacker to inject malicious expressions that are executed when the information is exported using the ‘Get my data in CSV’ tool. Successful exploitation of this vulnerability could facilitate unauthorised access to the victim’s personal data.