CVE-2023-50030

In the module "Jms Setting" jmssetting from Joommasters for PrestaShop, a guest can perform SQL injection in versions = 1.1.0. The method JmsSetting::getSecondImgs has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a blind SQL injection...

CVE-2023-50030

The CVE-2023-50030 issue affects the Jms Setting module for PrestaShop (Joommasters). The vulnerability is a blind SQL injection in JmsSetting::getSecondImgs() that can be triggered by a trivial HTTP request, affecting versions