critical9.8
CVE-2023-34577
SQL injection vulnerability in Prestashop opartplannedpopup 1.4.11 and earlier allows remote attackers to run arbitrary SQL commands via OpartPlannedPopupModul…
Impact
SQL injection vulnerability in Prestashop opartplannedpopup 1.4.11 and earlier allows remote attackers to run arbitrary SQL commands via OpartPlannedPopupModuleFrontController::prepareHook() method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Planned Popup Project | Planned Popup | before 1.4.12 |