Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-45386

In the module extratabspro before version 2.2.8 from MyPresta.eu for PrestaShop, a guest can perform SQL injection via `extratabspro::searchcategory()`, `extratabspro::searchproduct()` and `extratabspro::searchmanufacturer().'

Published

2023-10-17T05:15:50.787

Last Modified

2024-11-21T08:26:52.847

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-89
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mypresta product_extra_tabs_pro < 2.2.8 Yes
References