CVE-2024-25845

CVE-2024-25845 applies to the PrestaShop module CD Custom Fields 4 Orders (cdcustomfields4orders) version 1.0.0 and earlier. A guest can perform SQL injection in affected versions, exposing confidentiality, integrity, and availability (CVSS v3.1: 9.8, network access, no user interaction). There a...

CVE-2024-25845

In the module "CD Custom Fields 4 Orders" cdcustomfields4orders = 1.0.0 from Cleanpresta.com for PrestaShop, a guest can perform SQL injection in affected versions...