How many prestashop prestashop/productcomments CVEs are in CISA KEV?

None of prestashop prestashop/productcomments's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for prestashop prestashop/productcomments vulnerabilities?

Yes — 1 of prestashop prestashop/productcomments's CVEs have a known public exploit.

Which versions of prestashop prestashop/productcomments are affected?

6 distinct prestashop prestashop/productcomments versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in prestashop prestashop/productcomments CVEs?

prestashop prestashop/productcomments's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

What is the average severity of prestashop prestashop/productcomments CVEs?

The average CVSS base score across prestashop prestashop/productcomments's scored CVEs is 7.7.

prestashop prestashop/productcomments Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: prestashop prestashop/productcomments vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

prestashop prestashop/productcomments Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

prestashop prestashop/productcomments has 3 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting prestashop prestashop/productcomments, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of prestashop prestashop/productcomments's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of prestashop prestashop/productcomments's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of prestashop prestashop/productcomments's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every prestashop prestashop/productcomments version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 5.0.21 CVE
4.0.0 <= v < 4.2.01 CVE
4.0.0 <= v < 4.2.11 CVE

Fixed in

4.2.01 CVE
4.2.11 CVE
5.0.21 CVE

Find a version

3 CVEs

Sort

Medium vulnerability · 2022-09-02
CVE-2022-35933
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.5% (43th pct)2022-09-02
High vulnerability · 2020-12-03
CVE-2020-26248
Public exploit
Patch
CWE-89
High · CVSS 8.2
EPSS 12.4% (96th pct)2020-12-03
High vulnerability · 2020-11-16
CVE-2020-26225
Patch
CWE-79
High · CVSS 8.7
EPSS 0.9% (57th pct)2020-11-16

Common weakness types

The CWE weakness categories most often found in prestashop prestashop/productcomments CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many prestashop prestashop/productcomments CVEs were published each year.

2020

2022

Other prestashop products

Browse vulnerabilities for other products by prestashop.

prestashop103 CVEs prestashop/prestashop31 CVEs m4 pdf3 CVEs prestashop checkout3 CVEs productcomments3 CVEs blockreassurance2 CVEs customer reassurance block2 CVEs eo tags

Frequently asked questions

Common questions about prestashop prestashop/productcomments vulnerabilities.

How many CVEs does prestashop prestashop/productcomments have?: prestashop prestashop/productcomments has 3 published CVE records since 2020.
How many prestashop prestashop/productcomments CVEs are in CISA KEV?: None of prestashop prestashop/productcomments's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for prestashop prestashop/productcomments vulnerabilities?: Yes — 1 of prestashop prestashop/productcomments's CVEs have a known public exploit.
Which versions of prestashop prestashop/productcomments are affected?: 6 distinct prestashop prestashop/productcomments versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in prestashop prestashop/productcomments CVEs?: prestashop prestashop/productcomments's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
What is the average severity of prestashop prestashop/productcomments CVEs?: The average CVSS base score across prestashop prestashop/productcomments's scored CVEs is 7.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track prestashop prestashop/productcomments vulnerabilities

Monitor new prestashop prestashop/productcomments vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing