CVE-2023-45386

Name of the Vulnerable Software and Affected Versions extratabspro versions prior to 2.2.8

Description A SQL injection issue exists, allowing a guest to perform malicious actions via extratabspro::searchcategory(), extratabspro::searchproduct(), and extratabspro::searchmanufacturer() function calls.

Recommendations For versions prior to 2.2.8, update to version 2.2.8 or later to resolve the issue. As a temporary workaround, consider disabling the extratabspro::searchcategory(), extratabspro::searchproduct(), and extratabspro::searchmanufacturer() functions until a patch is available.