2 matches found
Sql injection
SQL injection vulnerability in Presta Monster "Multi Accessories Pro" hsmultiaccessoriespro module for PrestaShop versions 5.1.1 and before, allows remote attackers to escalate privileges and obtain sensitive information via the method HsAccessoriesGroupProductAbstract::getAccessoriesByIdProducts...
7.5CVSS8.1AI score0.00611EPSS
SaveExploits0References1Affected Software1
CVE-2023-50026
CVE-2023-50026 is a SQL injection vulnerability affecting the PrestaMonster/PrestaShop integration in the hsmultiaccessoriespro module. The issue is triggered through HsAccessoriesGroupProductAbstract::getAccessoriesByIdProducts() and impacts PrestaShop versions 5.1.1 and earlier. According to th...
9.8CVSS9.6AI score0.00611EPSS
SaveExploits0References1Affected Software1
20