high8.8
CVE-2023-25206
PrestaShop ws_productreviews < 3.6.2 is vulnerable to SQL Injection.
Impact
PrestaShop ws_productreviews < 3.6.2 is vulnerable to SQL Injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Prestashop | Advanced Reviews | before 3.6.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://addons.prestashop.com/en/customer-reviews/22373-advanced-reviews-photos-reminder-google-snippets.html
- https://friends-of-presta.github.io/security-advisories/modules/2023/03/14/ws_productreviews.html
- https://addons.prestashop.com/en/customer-reviews/22373-advanced-reviews-photos-reminder-google-snippets.html
- https://friends-of-presta.github.io/security-advisories/modules/2023/03/14/ws_productreviews.html