critical9.8
CVE-2023-50028
In the module "Sliding cart block" (blockslidingcart) up to version 2.3.8 from PrestashopModules.eu for PrestaShop, a guest can perform SQL injection.
Impact
In the module "Sliding cart block" (blockslidingcart) up to version 2.3.8 from PrestashopModules.eu for PrestaShop, a guest can perform SQL injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Prestashopmodules | Sliding Cart Block | before 2.3.8 |
Weakness classification
References
- NVD record
- CVE.org record
- https://addons.prestashop.com/en/express-checkout-process/3321-block-sliding-cart.html
- https://security.friendsofpresta.org/modules/2024/01/16/blockslidingcart.html
- https://addons.prestashop.com/en/express-checkout-process/3321-block-sliding-cart.html
- https://security.friendsofpresta.org/modules/2024/01/16/blockslidingcart.html