high8.8
CVE-2023-24763
In the module "Xen Forum" (xenforum) for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0.
Impact
In the module "Xen Forum" (xenforum) for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Prestashop | Xen Forum | before 2.13.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://addons.prestashop.com/en/blog-forum-new/19299-xen-forum.html
- https://friends-of-presta.github.io/security-advisories/modules/2023/03/06/xenforum.html
- https://addons.prestashop.com/en/blog-forum-new/19299-xen-forum.html
- https://friends-of-presta.github.io/security-advisories/modules/2023/03/06/xenforum.html