CVE-2023-39645

The CVE-2023-39645 entry concerns the Theme Volty CMS Payment Icon module for PrestaShop. Affected versions are up to 4.0.1, where a guest can perform SQL injection due to improper neutralization of SQL parameters. The vulnerability is exploitable via the module’s TVCMSPaymentIcon endpoint, speci...