CVE-2023-27034

The Jms Blog (jmsblog) module for the PrestaShop e-commerce platform (version 2.5.5 ) is vulnerable to a Time Based SQL injection . This issue arises from a lack of adequate measures to protect the SQL query structure, allowing a remote attacker to execute arbitrary SQL queries. Successful exploi...