TI-2023-24342 CVE-2023-45387 · GHSA-876j-4j97-w5j7
In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions…
Priority MEDIUM 50
In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via `exportProduct::_addDataToDb().`