CVE-2024-28390

The Advanced Plugins ultimateimagetool module for PrestaShop is affected by an Improper Access Control vulnerability in versions prior to v.2.2.01 . This flaw allows a remote attacker to escalate privileges and obtain sensitive information. To remediate this issue, users should update to version ...

CVE-2023-30200

The CVE-2023-30200 entry concerns the PrestaShop Advanced Plugins module, specifically the Image: WebP, Compress, Zoom, Lazy load, Alt & More (ultimateimagetool) up to version 2.1.02. The vulnerability is a path traversal flaw that allows a guest to download personal information without restricti...