Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-28839

Опубликовано: 18 апр. 2023
Источник: nvd
CVSS3: 9.4
CVSS3: 9.8
EPSS Низкий

Описание

Shoppingfeed PrestaShop is an add-on to the PrestaShop ecommerce platform to synchronize data. The module Shoppingfeed for PrestaShop is vulnerable to SQL injection between version 1.4.0 and 1.8.2 due to a lack of input sanitization. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this issue.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:shoppingfeed:shoppingfeed:*:*:*:*:*:prestashop:*:*
Версия от 1.4.0 (включая) до 1.8.3 (исключая)

EPSS

Процентиль: 40%
0.00182
Низкий

9.4 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-89

EPSS

Процентиль: 40%
0.00182
Низкий

9.4 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-89