Sql injection

In the module "Import/Update Bulk Product from any Csv/Excel File Pro" baimporter up to version 1.1.28 from Buy Addons for PrestaShop, a guest can perform SQL injection in affected versions...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop baimporter versions prior to 1.1.28, which stems from a SQL...

CVE-2024-25843

The CVE-2024-25843 affects the PrestaShop module Import/Update Bulk Product from any Csv/Excel File Pro (ba_importer) up to version 1.1.28 by Buy Addons. The root cause is a SQL injection in the module, allowing a guest to inject SQL in affected versions. Impact is a security compromise of data c...