CVE-2023-27843

2023-04-2500:00:00

mitre

www.cve.org

prestashop

askforaquote

sql injection

cve-2023-27843

remote attacker

privileges

quotesproduct::deleteproduct

0.001 Low

EPSS

Percentile

49.0%

JSON

SQL injection vulnerability found in PrestaShop askforaquote v.5.4.2 and before allow a remote attacker to gain privileges via the QuotesProduct::deleteProduct component.

References

addons.prestashop.com/en/quotes/3725-ask-for-a-quote-convert-to-order-messaging-system.html

friends-of-presta.github.io/security-advisories/modules/2023/04/25/askforaquote.html

0.001 Low

EPSS

Percentile

49.0%

JSON

Related for CVELIST:CVE-2023-27843