CVE-2024-28391

A SQL injection vulnerability exists in the FME Modules quickproducttable module for PrestaShop versions 1.2.1 and before . The flaw allows a remote attacker to escalate privileges and obtain sensitive information by exploiting the readCsv(), displayAjaxProductChangeAttr, displayAjaxProductAddToC...