CVE-2024-36683

2024-06-2423:15:10

[email protected]

web.nvd.nist.gov

sql injection

products alert

smart modules

prestashop

sensitive information

vulnerability

7.6 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

SQL injection vulnerability in the module “Products Alert” (productsalert) before 1.7.4 from Smart Modules for PrestaShop allows attackers to obtain sensitive information and cause other impacts via the ProductsAlertAjaxProcessModuleFrontController::initContent method.

References

security.friendsofpresta.org/modules/2024/06/20/productsalert.html