CVE-2011-4544: Multiple cross-site scripting (XSS) vulnerabilities in Prestashop before 1.5 allow remote attackers to inje...

Security readout for executives and security teams

CVE-2011-4544 is a set of cross-site scripting issues in Prestashop before 1.5. A remote attacker could cause script or HTML to run in a user’s browser through several Mondial Relay and admin file manager parameters. Business risk depends on whether old Prestashop code is still exposed. Exposure is most likely on legacy Prestashop installations older than 1.5, especially where the Mondial Relay module or admin ajaxfilemanager paths remain reachable. The provided affected-product metadata is incomplete, so version and route validation are required. Prioritize remediation for any internet-facing Prestashop instance older than 1.5. This is an old issue, but legacy ecommerce systems often retain sensitive sessions, customer data, and administrative access paths. If no affected legacy systems exist, treat it as a hygiene verification item. Mitigation focus: Identify and retire Prestashop versions older than 1.5.; Check vendor guidance before applying any source-level fix.; Disable unused Mondial Relay and ajaxfilemanager components where operationally safe..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.