CVE-2023-50028

2024-01-1900:00:00

mitre

www.cve.org

cve-2023-50028

prestashop

sql injection

AI Score

Confidence

High

EPSS

0.001

Percentile

33.0%

JSON

In the module “Sliding cart block” (blockslidingcart) up to version 2.3.8 from PrestashopModules.eu for PrestaShop, a guest can perform SQL injection.

References

addons.prestashop.com/en/express-checkout-process/3321-block-sliding-cart.html

security.friendsofpresta.org/modules/2024/01/16/blockslidingcart.html