CVE-2022-21686

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

PrestaShop is an Open Source e-commerce platform. Starting with version 1.7.0.0 and ending with version 1.7.8.3, an attacker is able to inject twig code inside the back office when using the legacy layout. The problem is fixed in version 1.7.8.3. There are no known workarounds.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Jan 26, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-216876.5gh-ost is a triggerless online schema migration solution for MySQL. Versions prior to 1.1.3 are subject to an arbitrary file read vulnerabilCVE-2022-216885.5OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor netCVE-2022-216897.5OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor netCVE-2022-21694.8The Loading Page with Loading Screen WordPress plugin before 1.0.83 does not escape its settings, allowing high privilege users such as admiCVE-2022-216905.4OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor netCVE-2022-216914.3OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor netCVE-2022-216924.3OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor netCVE-2022-216936.5OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor netCVE-2022-216945.3OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor netCVE-2022-216955.3OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor netCVE-2022-216964.3OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor netCVE-2022-216977.1Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prior to 3.2.1 are vulne
CVE-2022-21686: Critical severity, CVSS 9.8 | Vulnix