CVE-2025-51586

3.7 lowEPSS 0.8%

Low (3.7) in prestashop prestashop. EPSS 0.8% chance of exploitation in the next 30 days.

An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature.

Severity

CVSS 3.1

3.7 low

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-359
Published: 2025-09-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

prestashop:prestashop

References

https://github.com/PrestaShop/PrestaShop/releases/tag/8.2.1
https://maxime-morel.github.io/advisories/2025/CVE-2025-51586.md
https://prestashop.com/

Check your stack JSON