PrestaShop 'possearchproducts' <= 1.7 - SQL Injection

In the module “Search Products” possearchproducts from PosThemes for PrestaShop, a guest can perform SQL injection in affected versions. id: CVE-2023-30192 info: name: PrestaShop 'possearchproducts' = 1.7 - SQL Injection author: mastercho severity: critical description: | In the module “Search...

CVE-2023-30192

creationtimestamp| type| source ---|---|--- 2025-06-09 14:27:13+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-30192.yaml 2025-06-11 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lreckkhkef24...

CVE-2023-30192

Prestashop possearchproducts 1.7 is vulnerable to SQL Injection via PosSearch::find...