PT-2024-25180 · Prestaddons · Prestaddons Flashsales

Name of the Vulnerable Software and Affected Versions: Prestaddons flashsales versions 1.9.7 and earlier Description: The issue allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method, potentially leading to unauthorized data access or modification. Recommendations:...