{"id":"GHSA-6xxj-gcjq-wgf4","aliases":["CVE-2021-43789"],"title":"SQL injection in prestashop/prestashop","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"HIGH","description":"### Impact\nBlind SQLi using Search filters with `orderBy` and `sortOrder` parameters\n\n### Patches\nThe problem is fixed in 1.7.8.2","severity":"high","score":7.5,"published":"2021-12-07T21:23:17.000Z","modified":"2026-07-08T06:29:13.564Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"prestashop/prestashop","sources":[{"name":"OSV · GHSA-6xxj-gcjq-wgf4","url":"https://osv.dev/vulnerability/GHSA-6xxj-gcjq-wgf4"}],"ranges":[{"events":[{"introduced":"1.7.5.0"},{"fixed":"1.7.8.2"}],"type":"ECOSYSTEM"}],"versions":["1.7.5.0","1.7.5.1","1.7.5.2","1.7.6.0","1.7.6.0-beta.1","1.7.6.0-rc.1","1.7.6.0-rc.2","1.7.6.1","1.7.6.2","1.7.6.3","1.7.6.4","1.7.6.5","1.7.6.6","1.7.6.7","1.7.6.8","1.7.6.9","1.7.7.0","1.7.7.0-beta.1","1.7.7.0-beta.2","1.7.7.0-rc.1","1.7.7.1","1.7.7.2","1.7.7.3","1.7.7.4","1.7.7.5","1.7.7.6","1.7.7.7","1.7.7.8","1.7.8.0","1.7.8.0-beta.1","1.7.8.0-rc.1","1.7.8.1"],"fixed":["1.7.8.2"]}],"sourceAffected":[],"references":["https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-6xxj-gcjq-wgf4","https://nvd.nist.gov/vuln/detail/CVE-2021-43789","https://github.com/PrestaShop/PrestaShop/issues/26623","https://github.com/PrestaShop/PrestaShop/commit/6482b9ddc9dcebf7588dbfd616d2d635218408d6","https://cwe.mitre.org/data/definitions/89.html","https://github.com/PrestaShop/PrestaShop","https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.8.2"],"sources":[{"name":"OSV","id":"GHSA-6xxj-gcjq-wgf4","modified":"2026-07-08T06:29:13.564288026Z","url":"https://osv.dev/vulnerability/GHSA-6xxj-gcjq-wgf4"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","score":7.5}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T17:15:31.077Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}