Vulnerabilities

TI-2024-16970 CVE-2024-25844 · GHSA-hc3f-33fv-495x

An issue was discovered in Common-Services "So Flexibilite" (soflexibilite) module for…

LOW 34

An issue was discovered in Common-Services "So Flexibilite" (soflexibilite) module for PrestaShop before version 4.1.26, allows remote attackers to escalate privileges and obtain sensitive information via debug file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0055 Published 2024-03-03 No fix listed CWE-280

TI-2024-16967 CVE-2024-25841 · GHSA-35g3-5r8c-ffwf

In the module "So Flexibilite" (soflexibilite) from Common-Services for PrestaShop <…

LOW 27

In the module "So Flexibilite" (soflexibilite) from Common-Services for PrestaShop < 4.1.26, a guest (authenticated customer) can perform Cross Site Scripting (XSS) injection.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00385 Published 2024-02-27 No fix listed CWE-79

Vulnerabilities

Filters

An issue was discovered in Common-Services "So Flexibilite" (soflexibilite) module for…

In the module "So Flexibilite" (soflexibilite) from Common-Services for PrestaShop <…