critical9.8
CVE-2023-36263
Prestashop opartlimitquantity 1.4.5 and before is vulnerable to SQL Injection.
Impact
Prestashop opartlimitquantity 1.4.5 and before is vulnerable to SQL Injection. OpartlimitquantityAlertlimitModuleFrontController::displayAjaxPushAlertMessage()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Store-Opart | Op\'Art Limit Quantity | before 1.4.6 |