PT-2023-19979 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 6.1.3 DpdFrance module versions prior to 6.1.3 Description: The issue allows for SQL Injection via the "dpdfrance/ajax.php" endpoint. Recommendations: For PrestaShop versions prior to 6.1.3, update to version 6.1....

CVE-2023-25207: Improper Neutralization of Special Elements used in an SQL Command

PrestaShop dpdfrance 6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php...