1 matches found
CVE-2024-24303: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" hiadvancedgiftwrapping module for PrestaShop before version 1.4.1, allows remote attackers to escalate privileges and obtain sensitive information via the HiAdvancedGiftWrappingGiftWrappingModuleFrontController::addGiftWrappingCartValue...
9.8CVSS5.9AI score0.00676EPSS
SaveExploits0References3
20