Skip to content

CVE record · 2 sources

CVE-2026-124916

PrestaShop contains an authenticated PHP code injection vulnerability in the back-office Performance debug-mode configuration.

Vendor: PrestaShop
Product: PrestaShop
Exposure class: Web platform

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

35

CERT/CC note CERT/CC 2h ago

PrestaShop Performance Debug Configuration Contains a PHP Code Injection Vulnerability

Overview PrestaShop's back-office Performance > Debug mode functionality contains a PHP code injection vulnerability. An authenticated attacker with permission to modify debug-mode configuration can submit crafted cookie…

CVE-2026-124916 PrestaShop
20

CVE NVD 1h ago

PrestaShop contains an authenticated PHP code injection vulnerability in the back-office Performance debug-mode configuration.

PrestaShop contains an authenticated PHP code injection vulnerability in the back-office Performance debug-mode configuration. A back-office user with permission to modify debug settings can supply a crafted `debug_cookie_name`…

CVE-2026-124916 PrestaShop