Read the docs

Sunnytoo

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Sunnytoo records in CISA KEV

No Sunnytoo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Product Comments 1 record MEDIUM Stblogsearch 1 record MEDIUM Sturls 1 record MEDIUM

Records

1 record in Product Comments · all components

TI-2024-18851 CVE-2024-28388 · GHSA-6xfp-g425-7cw6

SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5…

Priority MEDIUM 44

SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListc…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00832 Published 2024-03-14 No fix listed CWE-89
Open these records in search →