How severe is CVE-2025-61924?

CVE-2025-61924 has a CVSS v3 score of 3.8 (LOW).

CVE-2025-61924

Name: prestashop_checkout
Author: prestashop

3.8LOW

PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the Target PayPal merchant account hijacking from backoffice due to wron

Publicado: 10/16/2025Actualizado: 12/29/2025

Descripción

PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the Target PayPal merchant account hijacking from backoffice due to wrong usage of the PHP array_search(). The vulnerability is fixed in versions 4.4.1 and 5.0.5. No known workarounds exist.

Análisis IAImpulsado por IA

Productos Afectados

prestashopprestashop_checkout

Referencias

https://github.com/PrestaShopCorp/ps_checkout/security/advisories/GHSA-wvpg-4wrh-5889
Vendor Advisory