Blmodules

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Blmodules records in CISA KEV

No Blmodules vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2023-24952 CVE-2023-46356 · GHSA-vg92-hh46-66vr

HIGH 82

In the module "CSV Feeds PRO" (csvfeeds) before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00761 Published 2023-10-31 No fix listed CWE-89

TI-2023-20713 CVE-2023-39643 · GHSA-6hfh-xhjg-jm5j

HIGH 82

Bl Modules xmlfeeds before v3.9.8 was discovered to contain a SQL injection vulnerability via the component SearchApiXml::Xmlfeeds().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00807 Published 2023-09-15 No fix listed CWE-89

TI-2023-24951 CVE-2023-46355 · GHSA-fqvx-v26x-86c5

LOW 25

In the module "CSV Feeds PRO" (csvfeeds) < 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restriction.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00501 Published 2023-11-27 No fix listed