CVE-2024-34994

2024-06-1921:15:57

[email protected]

web.nvd.nist.gov

channable

prestashop

sql injection

cve-2024-34994

7.6 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

In the module “Channable” (channable) up to version 3.2.1 from Channable for PrestaShop, a guest can perform SQL injection via ChannableFeedModuleFrontController::postProcess().

References

github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-06-18-channable.md