CVE-2025-69633

A SQL Injection vulnerability exists in the Advanced Popup Creator (advancedpopupcreator) module for PrestaShop versions 1.1.26 through 1.2.6 . The root cause is the improper neutralization of special elements where the fromController parameter is passed unsanitized to SQL queries within the getP...