TI-2023-11880 CVE-2023-27034 · GHSA-7jr7-v6gv-m656
PrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability.
Priority HIGH 83
PrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability.
Joommasters
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Joommasters records in CISA KEVNo Joommasters vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2023-27368 CVE-2023-50030 · GHSA-f494-837m-pqvm
In the module "Jms Setting" (jmssetting) from Joommasters for PrestaShop, a guest can…
Priority HIGH 82
In the module "Jms Setting" (jmssetting) from Joommasters for PrestaShop, a guest can perform SQL injection in versions <= 1.1.0.
TI-2023-13948 CVE-2023-29630 · GHSA-f96m-q66h-wrxf
PrestaShop jmsmegamenu 1.1.x and 2.0.x is vulnerable to SQL Injection via ajax_jmsmegamenu.php.
Priority MEDIUM 51
PrestaShop jmsmegamenu 1.1.x and 2.0.x is vulnerable to SQL Injection via ajax_jmsmegamenu.php.
TI-2023-13949 CVE-2023-29631 · GHSA-x5g4-8j3x-9jfm
PrestaShop jmsslider 1.6.0 is vulnerable to Incorrect Access Control via ajax_jmsslider.php.
Priority MEDIUM 50
PrestaShop jmsslider 1.6.0 is vulnerable to Incorrect Access Control via ajax_jmsslider.php.
TI-2018-04848 CVE-2018-6581 · GHSA-wjjj-8346-227v
SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the…
Priority MEDIUM 47
SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter.
TI-2023-13950 CVE-2023-29632 · GHSA-c7q4-9h6h-g94j
PrestaShop jmspagebuilder 3.x is vulnerable to SQL Injection via ajax_jmspagebuilder.php.
Priority MEDIUM 44
PrestaShop jmspagebuilder 3.x is vulnerable to SQL Injection via ajax_jmspagebuilder.php.