Directory Traversal Vulnerability in PrestaShop Checkout Payment Module by PrestaShop

CVE-2025-61923

What is CVE-2025-61923?

The PrestaShop Checkout payment module, developed in collaboration with PayPal, is susceptible to a directory traversal vulnerability. In versions prior to 4.4.1 and 5.0.5, insufficient validation on user inputs allows unauthorized access to filesystem paths, enabling arbitrary file disclosure. This pose significant security risks, particularly for sensitive information handled through the payment module. Users are strongly advised to upgrade to versions 4.4.1 or 5.0.5, as no viable workarounds exist for this vulnerability.

References