Activedesign

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Activedesign records in CISA KEV

No Activedesign vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Full Affiliates 1 record HIGH Newsletterpop 1 record HIGH

Records

1 record in Newsletterpop · all components

TI-2023-25596 CVE-2023-47308 · GHSA-pr7r-v23g-7m8q

In the module "Newsletter Popup PRO with Voucher/Coupon code" (newsletterpop) before…

HIGH 82

In the module "Newsletter Popup PRO with Voucher/Coupon code" (newsletterpop) before version 2.6.1 from Active Design for PrestaShop, a guest can perform SQL injection in affected versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.007 Published 2023-11-15 No fix listed CWE-89

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0