{
 "slug": "prestashop",
 "name": "PrestaShop",
 "tagline": "E-commerce platform for online stores with catalog, checkout and modules",
 "category": "cms-ecommerce",
 "use_cases": [
  "e-commerce",
  "online-store",
  "catalog"
 ],
 "aliases": [],
 "status": "live",
 "upstream": {
  "vendor": "PrestaShop SA",
  "url": "https://prestashop-project.org",
  "license": "OSL-3.0",
  "license_url": "https://github.com/PrestaShop/PrestaShop/blob/9.1.4/LICENSE.md"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   80,
   443
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "9.2.0",
   "last_build": "2026-10-23",
   "entity_id": "prod-ik3f7vshwmvuk",
   "ami_alias": "/aws/service/marketplace/prod-ik3f7vshwmvuk/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-ttufjozthjmee",
   "recommended_instance_type": "t3.medium",
   "price_usd_per_hour": 0.05,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "9.2.0",
   "last_build": "2026-10-24",
   "offer_id": "prestashop",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:prestashop:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.prestashop?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/prestashop/",
  "json": "https://lynxroute.com/products/prestashop/product.json"
 },
 "release_notes": [
  {
   "version": "9.2.0",
   "title": "PrestaShop 9.2.0 r2",
   "notes": "* Security: fixes PHP2Shell (CVE-2026-109618, CVE-2026-109619), an unauthenticated remote code execution flaw in PHP, by shipping Ubuntu php8.3 8.3.6-0ubuntu0.24.04.13 (USN-8948-1). Every earlier image of this product carries the vulnerable PHP; replace running instances or run: sudo apt-get update && sudo apt-get install --only-upgrade \"php8.3*\"\n* The application version is unchanged (PrestaShop 9.2.0); this is a security rebuild\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-23",
    "azure": "2026-10-24"
   }
  },
  {
   "version": "9.2.0",
   "title": "PrestaShop 9.2.0",
   "notes": "* PrestaShop 9.2.0 on Ubuntu 24.04 LTS - minor release (from 9.1.5). OSL-3.0 unchanged\n* Storefront: Hummingbird theme 2.1, multilanguage routes for entities, thumbnail fitment and richer structured data with product features and shop contact details\n* Back office: multistore support in the administration and product settings forms, a faster orders grid and Carts page, and SMTP on port 587 now selects the right TLS mode automatically\n* Security hardening: constant-time comparison of order secure keys, table names escaped in database queries and stricter validation of extra property definitions; Symfony components updated to 6.4.46 and PhpSpreadsheet to 1.30.6\n* Bundled native modules updated, including the new open-source one-page checkout module (AFL-3.0)\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-23",
    "azure": "2026-10-24"
   }
  },
  {
   "version": "9.1.5",
   "title": "PrestaShop 9.1.5",
   "notes": "* PrestaShop 9.1.5 on Ubuntu 24.04 LTS - security and bugfix release (from 9.1.4). OSL-3.0 unchanged\n* Security: image URLs are validated on CSV import to prevent server-side request forgery (GHSA-xrwj-pq6w-f8m4), and leading formula characters are escaped in CSV exports (GHSA-w6j9-q9rq-wrqg)\n* Security: the X-Forwarded-For header is parsed right to left to prevent IP spoofing (GHSA-2cr4-vw9p-pjvf), identifiers are escaped in legacy admin list filters to prevent SQL injection (GHSA-whxq-pxj5-qq7v), and the notification endpoints are restricted to authorised employees (GHSA-jf3w-9rmr-5rcr)\n* Back-office fixes across the order, product, employee and catalogue screens, including UTF-8 truncation in StringModifier::cutEnd() and multistore stock behaviour\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-08-23",
    "azure": "2026-09-06"
   }
  },
  {
   "version": "9.1.4",
   "title": "PrestaShop 9.1.4",
   "notes": "* PrestaShop 9.1.4 on Ubuntu 24.04 LTS\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Nginx + PHP 8.3 + MySQL 8; store installed at first boot with generated admin credentials\n* Web installer removed and back-office URL randomized per instance after setup\n* TLS enabled by default (self-signed); Certbot pre-installed for Let's Encrypt\n* UFW firewall pre-configured (ports 22, 443 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-api",
   "live": {
    "aws": "2026-06-24"
   }
  }
 ],
 "release_history": [
  {
   "version": "9.2.0",
   "aws": "2026-10-23",
   "azure": "2026-10-24"
  },
  {
   "version": "9.1.5",
   "aws": "2026-08-23",
   "azure": "2026-09-06"
  },
  {
   "version": "9.1.4",
   "aws": "2026-06-24"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-ik3f7vshwmvuk/latest \\\n  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer prestashop --plan payg-gen2\naz vm create -g my-rg -n prestashop --size Standard_D2s_v3 \\\n  --image lynxroute:prestashop:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "PrestaShop is a leading open-source eCommerce platform for building and running online stores - a PHP 8 web application served by Nginx with PHP-FPM and backed by MySQL 8. The bundled feature set covers product catalog and category management, customer accounts, shopping cart and one-page checkout, order and invoice management, promotions and vouchers, multi-currency and multi-language storefronts, SEO-friendly URLs, a customizable responsive storefront theme, a REST/webservice API, and a full back office for merchandising, shipping, payment, and tax configuration - extensible through a native module ecosystem. This image ships the open-source core only (OSL-3.0 core, AFL-3.0 modules and themes) with its bundled native modules and the default storefront theme; it includes nothing from the commercial PrestaShop Addons marketplace or PrestaShop Checkout. A self-hosted alternative to hosted store builders that keeps your catalog, orders, and customer data inside your own AWS account. OSL-3.0 license - no per-store fees, no vendor lock-in.",
  "image_adds": "Security hardening:\n* Store installed at first boot with generated admin credentials (saved to /root/prestashop-credentials.txt)\n* Web installer removed and the admin (back office) folder randomized per instance after setup\n* TLS enabled by default (self-signed); Certbot pre-installed - trusted HTTPS with Let's Encrypt in one command\n* MySQL 8 database bound to 127.0.0.1 only\n* UFW firewall - ports 22 and 443 only\n* fail2ban, AppArmor\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}