PT-2023-27052 · Prestashop · Theme Volty Cms Category Chain Slider
CVE-2023-39649
·
Publicado
2023-10-03
·
Atualizado
2023-10-05
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Theme Volty CMS Category Slider module for PrestaShop versions up to 4.0.1
Description
The issue is related to the improper neutralization of SQL parameters in the Theme Volty CMS Category Slider module for PrestaShop, allowing a guest to perform SQL injection in affected versions.
Recommendations
For versions up to 4.0.1, update to a version later than 4.0.1 to resolve the issue.
As a temporary workaround, consider restricting access to the module to minimize the risk of exploitation.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Theme Volty Cms Category Chain Slider