PT-2024-13852 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: Jms Setting module for PrestaShop versions = 1.1.0 Description: The issue allows a guest to perform SQL injection. The method JmsSetting::getSecondImgs contains a sensitive SQL call that can be exploited to forge a blind SQL injection with a...