CVE-2023-39645

Improper neutralization of SQL parameter in Theme Volty CMS Payment Icon module for PrestaShop. In the module “Theme Volty CMS Payment Icon” tvcmspaymenticon up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions...

CVE-2023-39645

The CVE-2023-39645 entry concerns the Theme Volty CMS Payment Icon module for PrestaShop. Affected versions are up to 4.0.1, where a guest can perform SQL injection due to improper neutralization of SQL parameters. The vulnerability is exploitable via the module’s TVCMSPaymentIcon endpoint, speci...