exploitDog

GHSA-p47p-mr97-m42h

Опубликовано: 19 окт. 2023

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

In the module "Creative Popup" (creativepopup) up to version 1.6.9 from WebshopWorks for PrestaShop, a guest can perform SQL injection via cp_download_popup().

In the module "Creative Popup" (creativepopup) up to version 1.6.9 from WebshopWorks for PrestaShop, a guest can perform SQL injection via cp_download_popup().

Ссылки

EPSS

Процентиль: 34%

0.00138

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-89

Связанные уязвимости

CVE-2023-45381

CVSS3: 9.8

nvd

больше 2 лет назад

In the module "Creative Popup" (creativepopup) up to version 1.6.9 from WebshopWorks for PrestaShop, a guest can perform SQL injection via `cp_download_popup().`

EPSS

Процентиль: 34%

0.00138

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-89