CVE-2024-28390

CVE-2024-28390 affects the Advanced Plugins ultimateimagetool module for PrestaShop prior to version 2.2.01. The issue permits a remote attacker to escalate privileges and access sensitive information due to improper access control in the module. Evidence from multiple sources confirms the vulner...

CVE-2023-30200

The CVE-2023-30200 entry concerns the PrestaShop Advanced Plugins module, specifically the Image: WebP, Compress, Zoom, Lazy load, Alt & More (ultimateimagetool) up to version 2.1.02. The vulnerability is a path traversal flaw that allows a guest to download personal information without restricti...