CVE-2023-28843

creationtimestamp| type| source ---|---|--- 2023-03-31 22:22:22+00:00| seen| https://t.me/cibsecurity/61271...

CVE-2023-28843 Improper neutralization of SQL parameter in PayPal module for PrestaShop

PrestaShop/paypal is an open source module for the PrestaShop web commerce ecosystem which provides paypal payment support. A SQL injection vulnerability found in the PrestaShop paypal module from release from 3.12.0 to and including 3.16.3 allow a remote attacker to gain privileges, modify data,...

CVE-2023-28843

The CVE-2023-28843 issue affects the PrestaShop/paypal module for PrestaShop, with SQL injection in versions 3.12.0–3.16.3 due to unsafely constructed SQL queries from unfiltered user input. This allows remote attackers to gain privileges, modify data, and potentially affect availability, specifi...