CVE-2025-61923: PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure

Description

PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the backoffice is missing validation on input resulting in a directory traversal and arbitrary file disclosure. The vulnerability is fixed in versions 4.4.1 and 5.0.5. No known workarounds exist.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

Attack vector

Network

Complexity

Low

Privileges

High

User interaction

None

Confidentiality

Low

Integrity

None

Availability

None

Scope

Changed

Exploitation

Is it being used?

Exploit prediction (EPSS)0.9% · higher than 60% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

PS

ps_checkout · PrestaShopCorp

< 4.4.1; >= 5.0.0, < 5.0.5 · source: vendor

PC

Prestashop Checkout · Prestashop

before 7.4.4.1; 7.5.0.1 before 7.5.0.5; 8.3.1.0 before 8.4.4.1; 8.5.0.0 before 8.5.0.5; 9.4.3.1 before 9.5.0.5 · source: NVD