Lucene search

K
cvelistMitreCVELIST:CVE-2023-23315
HistoryMar 01, 2023 - 12:00 a.m.

CVE-2023-23315

2023-03-0100:00:00
mitre
www.cve.org
3
prestashop
stripejs
module
blind sql injection
vulnerability

EPSS

0.002

Percentile

54.2%

The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method stripejsValidationModuleFrontController::initContent() has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.

EPSS

0.002

Percentile

54.2%

Related for CVELIST:CVE-2023-23315