PrestaShop debug mode allows PHP injection (CVE-2026-124916)
A back-office user who can edit debug settings can inject PHP; 9.2.1 fixes it, but affected releases are unconfirmed.
Stories per day · 30 days
1 stories, newest first · one card per story
1 stories, newest first · one card per story
A back-office user who can edit debug settings can inject PHP; 9.2.1 fixes it, but affected releases are unconfirmed.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views