cbcvebase.

Mypresta Google Merchant Center Feed vulnerabilities

1 known vulnerability affecting mypresta/google_merchant_center_feed.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-85520P1CRITICALCVSS 9.3ExploitedPoC≥ 1.9.1, ≤ 2.3.82026-09-29
CVE-2026-85520 [CRITICAL] CWE-73 CVE-2026-85520: Google Merchant Center Feed (gmfeed) module for PrestaShop is vulnerable to unauthenticated arbitrar Google Merchant Center Feed (gmfeed) module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An unauthenticated attacker can send a crafted request that controls the output file name, path, extension, and content through request parameters. Due to the lack of authentication and input validation, the req
nvd
Mypresta Google Merchant Center Feed vulnerabilities | cvebase