PT-2023-22561 · Prestashop · Payplug

Name of the Vulnerable Software and Affected Versions: PrestaShop module payplug versions 3.6.0 through 3.7.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ajax.php front controller, which is vulnerable to SQL injection attacks...