Vendors / Myprestamodules Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 7
CVSS high 5
Exploited now Myprestamodules records in CISA KEV No Myprestamodules vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 4 records in Product Catalog (csv, Excel) Import · all components
Priority HIGH 82
SimpleImportProduct Prestashop Module v6.2.9 was discovered to contain a SQL injection vulnerability via the key parameter at send.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00978 · Published 2023-09-20 · No fix listed CWE-89
Priority HIGH 72
MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.32313 · Published 2023-09-20 · No fix listed CWE-200
Priority MEDIUM 50
SQL Injection vulnerability in MyPrestaModules "Product Catalog (CSV, Excel) Import" (simpleimportproduct) modules for PrestaShop versions 6.5.0 and before, allows attackers to escalate privileges and obtain sensitive in…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00532 · Published 2024-03-03 · No fix listed CWE-269
Priority MEDIUM 49
In the module "Product Catalog (CSV, Excel) Import" (simpleimportproduct) <= 6.7.0 from MyPrestaModules for PrestaShop, a guest can upload files with extensions .php.
CVSS 3.1 CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.00789 · Published 2024-02-27 · No fix listed CWE-434
Open these records in search → All records by CVSS severity
7 5 0 0 0
THREATIST.IORead the docs