critical9.8
CVE-2023-40920
Prixan prixanconnect up to v1.62 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontController::importProduct…
Impact
Prixan prixanconnect up to v1.62 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontController::importProducts().
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Prixan | Prixanconnect | through 1.61 |