PT-2023-29533 · Prestashop +1 · Carousels Pack +1

Name of the Vulnerable Software and Affected Versions: Carousels Pack - Instagram, Products, Brands, Supplier hicarouselspack for PrestaShop versions up to 1.5.0 Description: A guest can perform SQL injection via the HiCpProductGetter::getViewedProduct function. This issue allows for potential da...

PrestaShop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image zoom. A security vulnerability exists in PrestaShop HiPresta, which originates from a guest that can perform SQL...

CVE-2023-45376: Improper Neutralization of Special Elements used in an SQL Command

In the module "Carousels Pack - Instagram, Products, Brands, Supplier" hicarouselspack for PrestaShop up to version 1.5.0 from HiPresta for PrestaShop, a guest can perform SQL injection via HiCpProductGetter::getViewedProduct...