CVE-2023-50028

CVE-2023-50028 affects the PrestaShop module “Sliding cart block” (blockslidingcart) for PrestaShop, up to version 2.3.8. The root cause is SQL injection via the module’s renderModal() path, allowing a guest to exploit the vulnerability. Multiple sources (NVD and CNNVD disclosures, Red Hat, PRION...

PrestaShop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A SQL injection vulnerability exists in PrestaShop blockslidingcart 2.3.8 and earlier versions, which stems...

CVE-2023-50028: Improper Neutralization of Special Elements used in an SQL Command

In the module "Sliding cart block" blockslidingcart up to version 2.3.8 from PrestashopModules.eu for PrestaShop, a guest can perform SQL injection...