In an ongoing effort to uphold the security and performance of online stores, PrestaShop has released security patches for its versions 1.7.8, 8.0, and 8.1. Numbered as 1.7.8.10, 8.0.5, and 8.1.1 respectively, these patches come with a range of significant fixes that store owners should consider implementing promptly.
PrestaShop 1.7.8.10: A Fundamental Security Update
While the 1.7 branch no longer receives official support, the importance of security cannot be overstated. Hence, the PrestaShop project has unveiled this patch that addresses vulnerabilities identified in the SQL manager and a potential XSS injection through the Validate::isCleanHTML() method.
Since this patch solely addresses the found vulnerabilities, updating from a PrestaShop 1.7.8.9 site should proceed without issues.
PrestaShop 8.0.5: A Vital Security Update
Despite the discontinuation of updates for the 8.0.x branch upon the release of PrestaShop 8.1, the security and stability of our stores remain integral to the PrestaShop project. Thus, this new version, 8.0.5, has been introduced. It includes security fixes and resolves several issues from version 8.0.4. Notably, it addresses a problem impacting module deactivation across all stores, rectifies challenges with PDF files generated from the admin panel displaying in English, and ensures compatibility with PHP8+.
As with any security update, users are strongly advised to swiftly update to take advantage of these enhancements, contributing to more secure stores. In any case, it is highly recommended to have a backup of the store in the event that one of the improvements conflicts with your store's configuration.
PrestaShop 8.1.1: Elevated Security for Up-to-Date Stores
PrestaShop version 8.1.1 is a critical step toward enhancing the security and performance of online stores. This update addresses various security vulnerabilities identified by researchers, alongside numerous issues reported by the community and the project's Quality Assurance team.
Notable fixes include product activation and order verification during the purchasing process, resolution of issues with the product editor affecting multiple stores, elimination of warnings in the admin panel by registering deprecated modifiers, and the correction of translations in multi-store themes. Furthermore, a persistent issue with PDF files generated in English from the admin panel has been resolved.
If you are using a version earlier than 8.1.0, the PrestaShop project recommends updating to the latest PrestaShop 8.1 branch as soon as possible to maintain a store with fewer errors and enhanced security. Follow the upgrade recommendations in this article when proceeding with the update.
Guidelines for Updating to PrestaShop 8.1.1
PrestaShop encourages store owners to update their installations promptly to capitalize on these crucial improvements. It is recommended to create full backups of the store before initiating the update. The update can be conveniently executed using the 1-Click Upgrade module.
Since version 8.1.1 is a "patch" update, there should be no issues when updating from previous 8.1 versions. Nonetheless, it is wise to perform a complete backup before embarking on any upgrade. In the event that users encounter problems during the update, unrelated to third-party modules or modifications, PrestaShop advises reporting the issue on GitHub.
