PT-2023-22559 · Prestashop · Prestashop Leocustomajax

CVE-2023-30150

·

Published

2023-06-14

·

Updated

2025-01-06

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PrestaShop leocustomajax version 1.0 PrestaShop leocustomajax version 1.0.0
Description The issue is related to SQL Injection. It affects the module via the "modules/leocustomajax/leoajax.php" endpoint.
Recommendations For PrestaShop leocustomajax version 1.0, consider disabling the leoajax.php module until a patch is available. For PrestaShop leocustomajax version 1.0.0, consider disabling the leoajax.php module until a patch is available.

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-30150

Affected Products

Prestashop Leocustomajax