Myprestamodules

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Myprestamodules records in CISA KEV

No Myprestamodules vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Product Catalog (csv, Excel) Import 4 records HIGH Orders (csv, Excel) Export Pro 3 records MEDIUM Exportproducts 2 records HIGH Cross Selling In Modal Cart 1 record MEDIUM Frequently Asked Questions Page 1 record HIGH Updateproducts 1 record MEDIUM

Records

2 records in Exportproducts · all components

TI-2023-24942 CVE-2023-46346 · GHSA-w62m-8695-jpgw

In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions…

HIGH 72

In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 4.1.1 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction by performing a pat…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00938 Published 2023-10-25 No fix listed CWE-22

TI-2023-24342 CVE-2023-45387 · GHSA-876j-4j97-w5j7

In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions…

MEDIUM 50

In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via `exportProduct::_addDataToDb().`

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00714 Published 2023-11-17 No fix listed CWE-89

Open these records in search →

Critical	7
High	5
Medium	0
Low	0
No CVSS	0