CVE-2024-34994

2024-06-1900:00:00

mitre

github.com

cve-2024-34994

channable

sql injection

prestashop

8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

In the module “Channable” (channable) up to version 3.2.1 from Channable for PrestaShop, a guest can perform SQL injection via ChannableFeedModuleFrontController::postProcess().

References

github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-06-18-channable.md