CVE-2022-45448: Improper Neutralization of Input During Web Page Generation

M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to an arbitrary HTML Document crafting vulnerability. The resource /m4pdf/pdf.php uses templates to dynamically create documents. In the case that the template does not exist, the application will return a fixed...

PT-2023-14670

Name of the Vulnerable Software and Affected Versions M4 PDF plugin for Prestashop sites versions 3.2.3 and before Description The issue is related to a directory traversal vulnerability. The f parameter is not properly checked in the resource "/m4pdf/pdf.php", allowing an attacker to download an...