Module-Releases

Jun 3, 2026 By PrestaShop team

Security update for the Faceted Search module (ps_facetedsearch)

A new version of the Faceted Search module is available and fixes a security issue. We recommend updating to v4.0.4.

A security vulnerability has been identified in the Faceted Search module (ps_facetedsearch). Under certain conditions, specially crafted requests could be processed unsafely by the module and lead to the execution of unauthorized code on the server. The issue does not require an account or authentication, so any shop running an affected version is exposed.

Jan 22, 2025 By PrestaShop team

SQL Injection attacks alert and security enhancements for PrestaShop

Protecting your PrestaShop store from recent attacks

A recent wave of attacks has targeted PrestaShop stores, leveraging SQL Injection vulnerabilities in third-party modules to compromise data security. Malicious actors exploit these vulnerabilities to inject harmful code into the PrestaShop database, enabling the theft of sensitive customer information by loading unauthorized JavaScript scripts.

Dec 3, 2020 By PrestaShop team

Release Of Module ProductComments 4.2.1

Maintenance version of the ProductComments module

We have identified and fixed a new security issue on module Product Comments.

Nov 17, 2020 By PrestaShop team

Release Of Module ProductComments 4.2.0

Maintenance version of the ProductComments module

The ongoing work on security for PrestaShop software continues. We have identified and fixed a new security issue on module Product Comments.