high8.8
CVE-2023-40923
MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and save_setting parameters.
Impact
MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and save_setting parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Myprestamodules | Orders \(Csv\, Excel\) Export Pro | before 5.0 |