Read the docs

Hipresta

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Hipresta records in CISA KEV

No Hipresta vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Carousels Pack 1 record MEDIUM Gift Wrapping Pro 1 record MEDIUM

Records

2 records

TI-2024-16070 CVE-2024-24303 · GHSA-3mpj-wgvw-fw9v

SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" (hiadvancedgiftwrapping)…

Priority MEDIUM 50

SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" (hiadvancedgiftwrapping) module for PrestaShop before version 1.4.1, allows remote attackers to escalate privileges and obtain sensitive information via the HiA…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00676 Published 2024-02-07 No fix listed CWE-89
TI-2023-24331 CVE-2023-45376 · GHSA-42hr-vjrg-wjr7

In the module "Carousels Pack - Instagram, Products, Brands, Supplier" (hicarouselspack)…

Priority MEDIUM 44

In the module "Carousels Pack - Instagram, Products, Brands, Supplier" (hicarouselspack) for PrestaShop up to version 1.5.0 from HiPresta for PrestaShop, a guest can perform SQL injection via HiCpProductGetter::getViewed…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00797 Published 2023-10-19 No fix listed CWE-89
Open these records in search →