critical9.1
CVE-2022-44727
The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ).
Impact
The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lineagrafica | Eu Cookie Law Gdpr | before 2.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://addons.prestashop.com/en/legal/8734-eu-cookie-law-gdpr-banner-blocker.html
- https://securityandstuff.com/posts/cve-2022-44727/
- https://www.lineagrafica.es/modp/lgcookieslaw/en/readme_en.pdf
- https://addons.prestashop.com/en/legal/8734-eu-cookie-law-gdpr-banner-blocker.html
- https://securityandstuff.com/posts/cve-2022-44727/
- https://www.lineagrafica.es/modp/lgcookieslaw/en/readme_en.pdf