exploitDog

CVE-2023-39652

Опубликовано: 28 авг. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVideoTabConfirmDeleteModuleFrontController::run().

Ссылки

https://security.friendsofpresta.org/modules/2023/08/24/tvcmsvideotab.html
Patch
Third Party Advisory
https://themevolty.com/
Product
https://security.friendsofpresta.org/modules/2023/08/24/tvcmsvideotab.html
Patch
Third Party Advisory
https://themevolty.com/
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:themevolty:theme_volty_video_tab:*:*:*:*:*:prestashop:*:*

Версия до 4.0.0 (включая)

EPSS

Процентиль: 22%

0.00072

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-8qj6-7wmc-pcwv

CVSS3: 9.8

github

больше 2 лет назад

theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVideoTabConfirmDeleteModuleFrontController::run().

EPSS

Процентиль: 22%

0.00072

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89