CVE-2022-44727

Name of the Vulnerable Software and Affected Versions EU Cookie Law GDPR (Banner + Blocker) module for PrestaShop version 2.1.3 and earlier

Description The issue allows SQL Injection via a cookie, specifically lgcookieslaw or lglaw. This can potentially lead to unauthorized access to sensitive data.

Recommendations For EU Cookie Law GDPR (Banner + Blocker) module for PrestaShop versions prior to 2.1.3, update to version 2.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the module until the update is applied. Avoid using the lgcookieslaw or lglaw cookies in the affected module until the issue is resolved.