Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: PrestaShop Component: M4 Pdf Clear all filters
TI-2022-22411 CVE-2022-45448 · GHSA-6597-86pv-vwjr

Cross-site Scripting in M4 PDF plugin for Prestashop sites

Priority LOW 27

M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to an arbitrary HTML Document crafting vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00328 Published 2023-09-20 No fix listed CWE-79
TI-2022-22410 CVE-2022-45447 · GHSA-g7vq-2xcx-xqqm

Path Traversal in M4 PDF plugin for Prestashop sites

Priority LOW 30

M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to a directory traversal vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00861 Published 2023-09-20 No fix listed CWE-22