CVE-2023-25206

PrestaShop wsproductreviews 3.6.2 is vulnerable to SQL Injection...

PrestaShop SQL注入漏洞

PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop wsproductreviews version 3.6.2, which stems from the presence of a SQL...

CVE-2023-25206

PrestaShop wsproductreviews 3.6.2 is vulnerable to SQL Injection...

CVE-2023-25206

CVE-2023-25206 affects PrestaShop ws_productreviews, with versions prior to 3.6.2 vulnerable to SQL injection. Root cause: insecure handling of database queries in ws_productreviews (SQLi). Impact: high confidentiality, integrity, and availability concerns as per CVSS. Remediation: upgrade to ws_...