CVE-2023-50027

2024-01-0500:00:00

mitre

www.cve.org

sql injection

buy addons

prestashop

remote attackers

privilege escalation

sensitive information

AI Score

Confidence

High

EPSS

0.001

Percentile

27.3%

JSON

SQL Injection vulnerability in Buy Addons baproductzoommagnifier module for PrestaShop versions 1.0.16 and before, allows remote attackers to escalate privileges and gain sensitive information via BaproductzoommagnifierZoomModuleFrontController::run() method.

References

security.friendsofpresta.org/modules/2023/12/19/baproductzoommagnifier.html