Lucene search

K
osvGoogleOSV:CVE-2020-15160
HistorySep 24, 2020 - 11:15 p.m.

CVE-2020-15160

2020-09-2423:15:13
Google
osv.dev
3
prestashop
sql injection
catalog product
1.7.5.0
1.7.6.8
vulnerable

AI Score

7.8

Confidence

Low

EPSS

0.108

Percentile

95.1%

PrestaShop from version 1.7.5.0 and before version 1.7.6.8 is vulnerable to a blind SQL Injection attack in the Catalog Product edition page with location parameter. The problem is fixed in 1.7.6.8

AI Score

7.8

Confidence

Low

EPSS

0.108

Percentile

95.1%