critical9.8
CVE-2023-27032
Prestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a SQL injection vulnerability via the component AdvancedPopup::getPopups().
Impact
Prestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a SQL injection vulnerability via the component AdvancedPopup::getPopups().
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idnovate | Popup Module \(On Entering\, Exit Popup\, Add Product\) And Newsletter | from 1.1.21 before 1.1.25 |
Weakness classification
References
- NVD record
- CVE.org record
- https://addons.prestashop.com/en/pop-up/23773-popup-on-entry-exit-popup-add-product-and-newsletter.html
- https://friends-of-presta.github.io/security-advisories/modules/2023/04/11/advancedpopupcreator.html
- https://addons.prestashop.com/en/pop-up/23773-popup-on-entry-exit-popup-add-product-and-newsletter.html
- https://friends-of-presta.github.io/security-advisories/modules/2023/04/11/advancedpopupcreator.html