Records134All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical39CVSS 9.0–10.0
CVSS high24CVSS 7.0–8.9
Exploited now
PrestaShop records in CISA KEVNo PrestaShop vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 50
In the PrestaShop module "productcomments" before version 4.2.1, an attacker can use a Blind SQL injection to retrieve data or stop the MySQL service.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.12388 · Published 2020-12-03 · Fixed in 4.2.1 CWE-89
Priority LOW 28
This package is a PrestaShop module that allows users to post reviews and rate products.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00561 · Published 2022-09-02 · Fixed in 5.0.2 CWE-79
