CVE-2024-36683

CVSS 7.3 HIGHEPSS 1.0%CWE-89

Vexday Risk Score

36Atención

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

CVSS 7.3EPSS 1.0%KEV nãoPoC —Nuclei simMetasploit —Patch —

Ciclo de vida

24 jun 2024Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

SQL injection vulnerability in the module "Products Alert" (productsalert) before 1.7.4 from Smart Modules for PrestaShop allows attackers to obtain sensitive information and cause other impacts via the ProductsAlertAjaxProcessModuleFrontController::initContent method.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Productos afectados

n/a · n/a

Referencias

https://security.friendsofpresta.org/modules/2024/06/20/productsalert.html