PrestaShop has recently found a major security vulnerability on core PrestaShop software which is affecting PrestaShop websites that are old versions or have custom code which is vulnerable to SQL injection. The vulnerability exploits the flaw in PrestaShop code through SQL injection by creating a file on the root folder (blm.php) and then directs the customers to a fake checkout page which sends the customer payment to the hacker’s account. This is a major vulnerability.