Information Disclosure in PrestaShop by PrestaShop
CVE-2025-51586
3.7LOW
Key Information:
- Vendor
PrestaShop
- Status
- Vendor
- CVE Published:
- 8 September 2025
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-51586?
A vulnerability exists in the file controllers/admin/AdminLoginController.php within PrestaShop prior to version 8.2.1. This flaw potentially allows attackers to exploit the password reset feature, leading to unauthorized access and the exposure of sensitive user information. It is crucial for users of affected versions to apply the latest updates to safeguard their data and network integrity.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.