CVE-2023-27847

2023-03-2700:00:00

mitre

www.cve.org

vulnerability

prestashop

xipblog

sql injection

remote attacker

privileges

0.001 Low

EPSS

Percentile

44.2%

JSON

SQL injection vulnerability found in PrestaShop xipblog v.2.0.1 and before allow a remote attacker to gain privileges via the xipcategoryclass and xippostsclass components.

References

friends-of-presta.github.io/security-advisories/modules/2023/03/23/xipblog.html

github.com/xpert-idea/xipblog/

0.001 Low

EPSS

Percentile

44.2%

JSON

Related for CVELIST:CVE-2023-27847