critical·Product Based Web Vulnerabilities·Updated Oct 11, 2025

PrestaShop - SQL Injection to Eval Injection

Est. Time~10 seconds

Scan TypeGroup Scan

Targetsdomain, subdomain, ipv4

CostFree

Times Used

continuous scan runs

Continuously Checked

assets under CS

Vulnerabilities Found

confirmed findings

References

github.com↗

CVECVE-2022-31181

9.8

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

PrestaShop is an Open Source e-commerce platform. In versions from 1.6.0.10 and before 1.7.8.7 PrestaShop is subject to an SQL injection vulnerability which can be chained to call PHP's Eval function on attacker input. The problem is fixed in version 1.7.8.7. Users are advised to upgrade. Users unable to upgrade may delete the MySQL Smarty cache feature.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Affected

PrestaShopby PrestaShop

>= 1.6.0.10, < 1.7.8.7

Updated Nov 10, 2026View on NVD →

Similar Tools

Check your infrastructure.
Right now.

12,000+ scanners. Free to start. No credit card required.

PrestaShop - SQL Injection to Eval Injection

Check your infrastructure.Right now.

Check your infrastructure.
Right now.