Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-45376
HistoryOct 19, 2023 - 12:00 a.m.

CVE-2023-45376

2023-10-1900:00:00
mitre
github.com
2
module carousels pack
sql injection
prestashop

AI Score

8.2

Confidence

Low

EPSS

0.001

Percentile

37.1%

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

In the module “Carousels Pack - Instagram, Products, Brands, Supplier” (hicarouselspack) for PrestaShop up to version 1.5.0 from HiPresta for PrestaShop, a guest can perform SQL injection via HiCpProductGetter::getViewedProduct().`

AI Score

8.2

Confidence

Low

EPSS

0.001

Percentile

37.1%

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2023-45376