FM / presta8

/var/softaculous/presta8

Name	Size	Mode	Actions
images/	-	0755	rm
php53/	-	0755	rm
php56/	-	0755	rm
php71/	-	0755	rm
php81/	-	0755	rm
php82/	-	0755	rm
.htaccess	3221	0644	edit dl rm
bootstrap.php	6177	0644	edit dl rm
changelog.txt	2105	0644	edit dl rm
clone.php	23386	0644	edit dl rm
clone_bootstrap.php	6306	0644	edit dl rm
edit.php	5044	0644	edit dl rm
edit.xml	447	0644	edit dl rm
extend.php	8651	0644	edit dl rm
fileindex.php	383	0644	edit dl rm
import.php	6738	0644	edit dl rm
info.xml	4662	0644	edit dl rm
install.js	1150	0644	edit dl rm
install.php	19650	0644	edit dl rm
install.xml	1542	0644	edit dl rm
md5	2769	0644	edit dl rm
new_order.html	58284	0644	edit dl rm
notes.txt	2456	0644	edit dl rm
order_conf.html	57472	0644	edit dl rm
parameters.php	832	0644	edit dl rm
parameters.yml	11	0644	edit dl rm
return_slip.html	44915	0644	edit dl rm
robots.txt	3309	0644	edit dl rm
settings.inc.php	23	0644	edit dl rm
shop1.json	3079	0644	edit dl rm
soft_delete.php	3152	0644	edit dl rm
update_appkey.php	544	0644	edit dl rm
update_pass.php	497	0644	edit dl rm
_bootstrap.php	6257	0644	edit dl rm

Edit: /var/softaculous/presta8/changelog.txt (2105B)

####################################
#   v8.2.8 - (2026-08-12)
####################################

- Core:
  - Improvement:
    - GHSA-xrwj-pq6w-f8m4 Validate image URLs on CSV import to prevent Server-Side Request Forgery (by @clotairer & @matthieu-rolland, vulnerability reported by lrui1)
    - GHSA-w6j9-q9rq-wrqg Escape leading formula characters in CSV exports (by @clotairer & @matthieu-rolland, vulnerability reported by Suphawith Phusanbai)
    - GHSA-2cr4-vw9p-pjvf Parse the X-Forwarded-For header from right to left to prevent IP spoofing (by @clotairer & @matthieu-rolland, vulnerability reported by Pedro Gabaldón Juliá from ITRESIT)
    - GHSA-whxq-pxj5-qq7v Escape identifiers in legacy admin list filters to prevent SQL injection (by @clotairer & @matthieu-rolland, found by Savio from Doyensec in collaboration with Anthropic Research)
    - GHSA-jf3w-9rmr-5rcr Restrict the notifications endpoints to authorised employees (by @clotairer & @matthieu-rolland, vulnerability reported by Robert Scherer)

####################################
#   v8.2.7 - (2026-06-03)
####################################

- Core:
  - Bug fix:
    - #231: Update faceted search (by @jolelievre)

####################################
#   v8.2.6 - (2026-04-16)
####################################

- Back Office
  - Improvement:
    - GHSA-w9f3-qc75-qgx9 Prevent xss exploitation via unprotected variables in customer threads (found by Savio from Doyensec in collaboration with Anthropic Research)

####################################
#   v8.2.5 - (2026-03-13)
####################################

- Front Office
  - Improvement:
    - GHSA-35pf-37c6-jxjv Prevent xss exploitation via unprotected variables in template
    - GHSA-283w-xf3q-788v Fix improper use of validation framework

####################################

####################################
#   v8.2.4 - (2026-02-03)
####################################

- Front Office
  - Improvement:
    - GHSA-67v7-3g49-mxh2 Protect users from time based email enumeration attacks (by @matthieu-rolland, vulnerability reported by Lam Yiu Tung)

#################################### # v8.2.8 - (2026-08-12) #################################### - Core: - Improvement: - GHSA-xrwj-pq6w-f8m4 Validate image URLs on CSV import to prevent Server-Side Request Forgery (by @clotairer & @matthieu-rolland, vulnerability reported by lrui1) - GHSA-w6j9-q9rq-wrqg Escape leading formula characters in CSV exports (by @clotairer & @matthieu-rolland, vulnerability reported by Suphawith Phusanbai) - GHSA-2cr4-vw9p-pjvf Parse the X-Forwarded-For header from right to left to prevent IP spoofing (by @clotairer & @matthieu-rolland, vulnerability reported by Pedro Gabaldón Juliá from ITRESIT) - GHSA-whxq-pxj5-qq7v Escape identifiers in legacy admin list filters to prevent SQL injection (by @clotairer & @matthieu-rolland, found by Savio from Doyensec in collaboration with Anthropic Research) - GHSA-jf3w-9rmr-5rcr Restrict the notifications endpoints to authorised employees (by @clotairer & @matthieu-rolland, vulnerability reported by Robert Scherer) #################################### # v8.2.7 - (2026-06-03) #################################### - Core: - Bug fix: - #231: Update faceted search (by @jolelievre) #################################### # v8.2.6 - (2026-04-16) #################################### - Back Office - Improvement: - GHSA-w9f3-qc75-qgx9 Prevent xss exploitation via unprotected variables in customer threads (found by Savio from Doyensec in collaboration with Anthropic Research) #################################### # v8.2.5 - (2026-03-13) #################################### - Front Office - Improvement: - GHSA-35pf-37c6-jxjv Prevent xss exploitation via unprotected variables in template - GHSA-283w-xf3q-788v Fix improper use of validation framework #################################### #################################### # v8.2.4 - (2026-02-03) #################################### - Front Office - Improvement: - GHSA-67v7-3g49-mxh2 Protect users from time based email enumeration attacks (by @matthieu-rolland, vulnerability reported by Lam Yiu Tung)