CVE-2023-34577

Name of the Vulnerable Software and Affected Versions Prestashop opartplannedpopup versions 1.4.11 and earlier

Description The issue allows remote attackers to run arbitrary SQL commands via the OpartPlannedPopupModuleFrontController::prepareHook() method. This enables attackers to potentially extract or modify sensitive data. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For versions 1.4.11 and earlier, consider disabling the OpartPlannedPopupModuleFrontController::prepareHook() method until a patch is available to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.