CVE-2023-27033

Prestashop cdesigner v3.1.3–v3.1.8 contains a code injection vulnerability in the component CdesignerSaverotateModuleFrontController::initContent(). Root cause: unsafe handling in that controller. Affected versions: 3.1.3 through 3.1.8. Potential impact: code injection with high confidentiality/i...

CVE-2023-30191

CVE-2023-30191 affects PrestaShop cdesigner versions prior to 3.1.9. The issue is a SQL Injection via CdesignerTraitementModuleFrontController::initContent(). Impact is high (C/H/I/A) per CVSS, with network attack vector and no user interaction. Remediation: upgrade to version 3.1.9 or later; app...