CVE-2023-30198

CVSS 7.5 HIGHEPSS 5.5%

Vexday Risk Score

41Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Proof of concept

Public proof of concept exists, but not yet automated.

CVSS 7.5EPSS 5.5%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

12 Jun 2023Published on NVD

26 Jun 2023Public PoC

Weaponization speed

14 daysto first PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

Prestashop winbizpayment <= 1.0.2 is vulnerable to Incorrect Access Control via modules/winbizpayment/downloads/download.php.

CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N

Affected products

public PoCs found — 3

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References