CVE-2024-24303

2024-02-0700:00:00

mitre

github.com

cve-2024-24303

sql injection

hipresta

gift wrapping pro

prestashop

privilege escalation

sensitive information

AI Score

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

SQL Injection vulnerability in HiPresta “Gift Wrapping Pro” (hiadvancedgiftwrapping) module for PrestaShop before version 1.4.1, allows remote attackers to escalate privileges and obtain sensitive information via the HiAdvancedGiftWrappingGiftWrappingModuleFrontController::addGiftWrappingCartValue() method.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:hipresta:gift_wrapping_pro:1.4.1:*:*:*:*:prestashop:*:*"
    ],
    "vendor": "hipresta",
    "product": "gift_wrapping_pro",
    "versions": [
      {
        "status": "affected",
        "version": "1.4.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]