CVE-2023-26860

PrestaShop Igbudget (v1.0.3 and earlier) contains a SQL injection in the LgBudgetBudgetModuleFrontController::displayAjaxGenerateBudget call path. The issue is exploitable remotely (network vector, low authentication/prerequisites, no user interaction) and can lead to unauthorized privilege eleva...