Prestatoolkit

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Prestatoolkit records in CISA KEV

No Prestatoolkit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Make An Offer/offer Your Price 1 record MEDIUM

Records

1 record

TI-2024-16975 CVE-2024-25849 · GHSA-8c9m-4jp4-hh84

In the module "Make an offer" (makeanoffer) <= 1.7.1 from PrestaToolKit for PrestaShop, a…

MEDIUM 50

In the module "Make an offer" (makeanoffer) <= 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer()` and `MakeOffers::addUserOffer()` .

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00636 Published 2024-03-08 No fix listed CWE-89

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0