Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-25691

A PHAR deserialization vulnerability in the component /themes/import of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.

Published

2025-07-30T17:15:27.030

Last Modified

2025-08-06T16:25:47.490

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses

Type: Secondary
CWE-77
CWE-502

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	prestashop	prestashop	8.2.0	Yes

References

http://dem0.com Not Applicable ([email protected])
http://dem0.com/admin/index.php/improve/design/themes/import?_token=btRUtV2Om2noliZZjeFQZhlMY3gYivjABbPOjP91L6U Broken Link ([email protected])
http://prestashop.com Product ([email protected])
https://github.com/3em0/cve_repo/blob/main/preshop/CVE-2025-25691.md Exploit, Third Party Advisory ([email protected])
https://github.com/PrestaShop/PrestaShop Product ([email protected])