CVE-2024-33836

In the module "JA Marketplace" jamarketplace up to version 9.0.1 from JA Module for PrestaShop, a guest can upload files with extensions .php. In version 6.X, the method JmarketplaceproductModuleFrontController::init and in version 8.X, the method...

CVE-2024-33836

In the module "JA Marketplace" jamarketplace up to version 9.0.1 from JA Module for PrestaShop, a guest can upload files with extensions .php. In version 6.X, the method JmarketplaceproductModuleFrontController::init and in version 8.X, the method...

CVE-2024-33836

The JA Marketplace (jamarketplace) module for PrestaShop (versions up to 9.0.1 ) is vulnerable to an unrestricted upload of files with dangerous types . A guest user can upload files with .php extensions to predictable paths due to flaws in the JmarketplaceproductModuleFrontController::init() met...