Read the docs

MyPresta

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

MyPresta records in CISA KEV

No MyPresta vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Customer Files Upload 1 record MEDIUM Customer Photo Gallery 1 record MEDIUM Manufacturers (brands) Images Block 1 record MEDIUM Product Extra Tabs Pro 1 record HIGH Product Tag Icons Pro 1 record MEDIUM

Records

1 record in Product Extra Tabs Pro · all components

TI-2023-24341 CVE-2023-45386 · GHSA-4xch-3w57-6pj7

In the module extratabspro before version 2.2.8 from MyPresta.eu for PrestaShop, a guest…

Priority HIGH 82

In the module extratabspro before version 2.2.8 from MyPresta.eu for PrestaShop, a guest can perform SQL injection via `extratabspro::searchcategory()`, `extratabspro::searchproduct()` and `extratabspro::searchmanufactur…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0077 Published 2023-10-17 No fix listed CWE-89
Open these records in search →