Read the docs

Apollo Theme

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Apollo Theme records in CISA KEV

No Apollo Theme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ap Pagebuilder 3 records MEDIUM

Records

3 records

TI-2022-07099 CVE-2022-22897 · GHSA-9j8j-w6vx-vqfr

A SQL injection vulnerability in the product_all_one_img and image_product parameters of…

Priority MEDIUM 57

A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1365 Published 2022-08-29 No fix listed CWE-89
TI-2024-06163 CVE-2024-6648 · GHSA-6m2f-83vf-p7fj

Path Traversal in AP Page Builder

Priority MEDIUM 45

Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'product_item_path' within the 'config' JSON file, allowing them to read any file…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00684 Published 2025-05-08 Fixed in 4.0.0 CWE-22
TI-2022-22083 CVE-2022-44897 · GHSA-pcfq-64f7-vjxp

A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component…

Priority LOW 29

A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component through 2.4.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the show_number parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00811 Published 2023-01-31 No fix listed CWE-79
Open these records in search →