CVE-2023-50029

PHP Injection vulnerability in the module "M4 PDF Extensions" m4pdf up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers to run arbitrary code via the M4PDF::saveTemplate method...

CVE-2023-50029

PHP Injection vulnerability in the module "M4 PDF Extensions" m4pdf up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers to run arbitrary code via the M4PDF::saveTemplate method...

CVE-2023-50029: Improper Control of Generation of Code

PHP Injection vulnerability in the module "M4 PDF Extensions" m4pdf up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers to run arbitrary code via the M4PDF::saveTemplate method...

CVE-2023-50029

The M4 PDF Extensions (m4pdf) module for PrestaShop , specifically versions up to 3.3.2 from PrestaAddons, contains a PHP Injection vulnerability. The root cause is the improper validation of inputs , which allows an attacker to pass malicious code through user parameters to the M4PDF::saveTempla...