CVE-2023-50029

Name of the Vulnerable Software and Affected Versions PrestaShop M4 PDF Extensions module versions up to 3.3.2

Description The issue allows attackers to run arbitrary code via the M4PDF::saveTemplate() method, potentially leading to code injection attacks. This could enable malicious activities, such as unauthorized data access or modification.

Recommendations For PrestaShop M4 PDF Extensions module versions up to 3.3.2, consider disabling the M4PDF::saveTemplate() method until a patch is available to prevent potential code injection attacks. Restrict access to the module to minimize the risk of exploitation.