critical9.8
CVE-2023-27845
SQL injection vulnerability found in PrestaShop lekerawen_ocs before v.1.4.1 allow a remote attacker to gain privileges via the KerawenHelper::setCartOperation…
Impact
SQL injection vulnerability found in PrestaShop lekerawen_ocs before v.1.4.1 allow a remote attacker to gain privileges via the KerawenHelper::setCartOperationInfo, and KerawenHelper::resetCheckoutSessionData components.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kerawen | Omnichannel Stocks | before 1.4.1 |