CVE-2021-43789

    Dashboard / Vulnerabilities / CVE-2021-43789

    CVE-2021-43789

    Published: 7 Dec 2021Last Modified: 7 Aug 2026

    Summary:

    Details: PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection using search filters with `orderBy` and `sortOrder` parameters. The problem is fixed in version 1.7.8.2.

    References: https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.8.2, https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-6xxj-gcjq-wgf4, https://github.com/PrestaShop/PrestaShop/issues/26623

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 59e7f6b5c4249be95babc297601928c8432d7735
    Fixed -227c2fb7eba4cd0cc67d04e1aef1facc2bf8f8ba

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-43789 | CVE-DB