CVE-2025-25691

Publication date

2025-07-30 00:00:00

Family

mitre

State

PUBLISHED

Description

A PHAR deserialization vulnerability in the component /themes/import of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.