CVE-2023-27032

2023-04-1200:00:00

mitre

www.cve.org

prestashop

advancedpopupcreator

sql injection

EPSS

0.018

Percentile

88.3%

JSON

Prestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a SQL injection vulnerability via the component AdvancedPopup::getPopups().

References

addons.prestashop.com/en/pop-up/23773-popup-on-entry-exit-popup-add-product-and-newsletter.html

friends-of-presta.github.io/security-advisories/modules/2023/04/11/advancedpopupcreator.html

EPSS

0.018

Percentile

88.3%

JSON

Related for CVELIST:CVE-2023-27032