CVE-2023-47308

In the module "Newsletter Popup PRO with Voucher/Coupon code" newsletterpop before version 2.6.1 from Active Design for PrestaShop, a guest can perform SQL injection in affected versions. The method NewsletterpopsendVerificationModuleFrontController::checkEmailSubscription has sensitive SQL calls...

CVE-2023-47308

In the module "Newsletter Popup PRO with Voucher/Coupon code" newsletterpop before version 2.6.1 from Active Design for PrestaShop, a guest can perform SQL injection in affected versions. The method NewsletterpopsendVerificationModuleFrontController::checkEmailSubscription has sensitive SQL calls...

CVE-2023-47308

CVE-2023-47308 affects Newsletter Popup PRO with Voucher/Coupon code for PrestaShop (before version 2.6.1). The vulnerability is a SQL injection in Checkout flow via NewsletterpopsendVerificationModuleFrontController::checkEmailSubscription(), where sensitive SQL calls can be triggered by a trivi...