Online stores hit with PrestaShop zero-day attacks

Online shops leveraging the PrestaShop platform are under attack from threat actors exploiting an SQL injection flaw, tracked as CVE-2022-36408, impacting PrestaShop versions 1.6.0.10 or later and versions 1.7.8.2 or later with the vulnerable Wishlist 2.0.0 to 2.1.0 module, BleepingComputer reports.

attacks cybercrime prestashop vulnerability management zero-day