CVE-2023-33663

2023-08-1600:00:00

mitre

www.cve.org

prestashop

module

sql injection

vulnerability

patched

10 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.1%

JSON

In the module “Customization fields fee for your store” (aicustomfee) from ai-dev module for PrestaShop, an attacker can perform SQL injection up to 0.2.0. Release 0.2.1 fixed this security issue.

References

security.friendsofpresta.org/modules/2023/08/16/aicustomfee.html

www.boutique.ai-dev.fr/en/customization/62-customization-fee.html