high8.8
CVE-2023-26860
SQL injection vulnerability found in PrestaShop Igbudget v.1.0.3 and before allow a remote attacker to gain privileges via the LgBudgetBudgetModuleFrontControl…
Impact
SQL injection vulnerability found in PrestaShop Igbudget v.1.0.3 and before allow a remote attacker to gain privileges via the LgBudgetBudgetModuleFrontController::displayAjaxGenerateBudget component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Save Your Carts And Buy Later Or Send It Project | Save Your Carts And Buy Later Or Send It | through 1.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://addons.prestashop.com/en/order-management/45282-save-your-carts-and-buy-later-or-send-it.html
- https://friends-of-presta.github.io/security-advisories/modules/2023/04/04/lgbudget.html
- https://addons.prestashop.com/en/order-management/45282-save-your-carts-and-buy-later-or-send-it.html
- https://friends-of-presta.github.io/security-advisories/modules/2023/04/04/lgbudget.html