CVE-2023-45376

In the module "Carousels Pack - Instagram, Products, Brands, Supplier" hicarouselspack for PrestaShop up to version 1.5.0 from HiPresta for PrestaShop, a guest can perform SQL injection via HiCpProductGetter::getViewedProduct...

CVE-2023-45376: Improper Neutralization of Special Elements used in an SQL Command

In the module "Carousels Pack - Instagram, Products, Brands, Supplier" hicarouselspack for PrestaShop up to version 1.5.0 from HiPresta for PrestaShop, a guest can perform SQL injection via HiCpProductGetter::getViewedProduct...

PT-2023-29533 · Prestashop +1 · Carousels Pack +1

Name of the Vulnerable Software and Affected Versions: Carousels Pack - Instagram, Products, Brands, Supplier hicarouselspack for PrestaShop versions up to 1.5.0 Description: A guest can perform SQL injection via the HiCpProductGetter::getViewedProduct function. This issue allows for potential da...