PHAR Deserialization Vulnerability in PrestaShop Themes Import Component
CVE-2025-25691
Currently unrated
What is CVE-2025-25691?
A PHAR deserialization vulnerability exists within the /themes/import component of PrestaShop version 8.2.0. This issue allows an attacker to craft a malicious POST request that could lead to the execution of arbitrary code on the server. The vulnerability poses significant risks, particularly considering how e-commerce platforms like PrestaShop are often targeted. Organizations using this version should take immediate measures to mitigate potential exploitation.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.