PrestaShop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A SQL injection vulnerability exists in PrestaShop blockslidingcart 2.3.8 and earlier versions, which stems...

CVE-2023-50028

CVE-2023-50028 affects the PrestaShop module “Sliding cart block” (blockslidingcart) for PrestaShop, up to version 2.3.8. The root cause is SQL injection via the module’s renderModal() path, allowing a guest to exploit the vulnerability. Multiple sources (NVD and CNNVD disclosures, Red Hat, PRION...