CVE-2024-26129

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

PrestaShop is an open-source e-commerce platform. Starting in version 8.1.0 and prior to version 8.1.4, PrestaShop is vulnerable to path disclosure in a JavaScript variable. A patch is available in version 8.1.4.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published: Feb 19, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-26137.5Data was not properly sanitized when decoding a QUIC ACK frame; this could have led to unrestricted memory consumption and a crash. This vul CVE-2024-261307.5cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior CVE-2024-261317.8Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to intent redirection, allowing a th CVE-2024-261323.3Element Android is an Android Matrix Client. A third-party malicious application installed on the same phone can force Element Android, vers CVE-2024-261334.9EventStoreDB (ESDB) is an operational database built to store events. A vulnerability has been identified in the projections subsystem in ve CVE-2024-261347.5cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in versio CVE-2024-261358.8MeshCentral is a full computer management web site. Versions prior to 1.1.21 a cross-site websocket hijacking (CSWSH) vulnerability within t CVE-2024-261367.5kedi ElectronCord is a bot management tool for Discord. Commit aaaeaf4e6c99893827b2eea4dd02f755e1e24041 exposes an account access token in t CVE-2024-261385.3The XWiki licensor application, which manages and enforce application licenses for paid extensions, includes the document `Licenses.Code.Lic CVE-2024-261398.1OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack o CVE-2024-26148.8Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption CVE-2024-261406.1com.yetanalytics/lrs is the Yet Analytics Core LRS Library. Prior to version 1.2.17 of the LRS library and version 0.7.5 of SQL LRS, a malic