CVE-2023-26860

SQL injection vulnerability found in PrestaShop Igbudget v.1.0.3 and before allow a remote attacker to gain privileges via the LgBudgetBudgetModuleFrontController::displayAjaxGenerateBudget component...

CVE-2023-26860

PrestaShop Igbudget (v1.0.3 and earlier) contains a SQL injection in the LgBudgetBudgetModuleFrontController::displayAjaxGenerateBudget call path. The issue is exploitable remotely (network vector, low authentication/prerequisites, no user interaction) and can lead to unauthorized privilege eleva...