CVE-2025-25692

Publication date

2025-07-30 00:00:00

Family

mitre

State

PUBLISHED

Description

A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.