Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. Starting in version 1.3.0 and prior to versions 4.4.1 and 5.0.5, missing validation on the Express Checkout feature allows silent login, enabling account takeover via email. The vulnerability is fixed in versions 4.4.1 and 5.0.5. No known workarounds exist.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-61922: Zero-Click Account Takeover on Prestashop - @dhakal_ananda https://dhakal-ananda.com.np/blogs/cve-2025-61922-analysis/
Post summary
The tweet merely links to a blog post analyzing CVE‑2025‑61922, a zero‑click account takeover vulnerability in Prestashop, without providing evidence of PoC, exploitation, or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | prestashop | prestashop_checkout | - | prestashop | - |