Vendors / Themevolty Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 9
CVSS high 0
Exploited now Themevolty records in CISA KEV No Themevolty vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04065 · Published 2023-08-28 · No fix listed CWE-89
Priority MEDIUM 50
theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVideoTabConfirmDeleteModuleFrontController::run().
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0062 · Published 2023-08-28 · No fix listed CWE-89
Priority MEDIUM 50
Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop In the module “Theme Volty CMS BrandList” (tvcmsbrandlist) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perf…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00639 · Published 2023-10-03 · No fix listed CWE-89
Priority MEDIUM 50
Improper neutralization of SQL parameter in Theme Volty CMS Category Slider module for PrestaShop.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00639 · Published 2023-10-03 · No fix listed CWE-89
Priority MEDIUM 50
Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00639 · Published 2023-10-03 · No fix listed CWE-89
Priority MEDIUM 50
Improper neutralization of SQL parameter in Theme Volty CMS Category Product module for PrestaShop.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00639 · Published 2023-10-03 · No fix listed CWE-89
Priority MEDIUM 50
Improper neutralization of SQL parameter in Theme Volty CMS Category Chain Slider module for PrestaShop.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00639 · Published 2023-10-03 · No fix listed CWE-89
Priority MEDIUM 50
Improper neutralization of SQL parameter in Theme Volty CMS Payment Icon module for PrestaShop.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00602 · Published 2023-10-03 · No fix listed CWE-89
Priority MEDIUM 50
SQL injection vulnerability found in PrestaShop themevolty v.4.0.8 and before allow a remote attacker to gain privileges via the tvcmsblog, tvcmsvideotab, tvcmswishlist, tvcmsbrandlist, tvcmscategorychainslider, tvcmscat…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00797 · Published 2023-10-31 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
9 0 0 0 0
THREATIST.IORead the docs