Vulnerabilities

TI-2024-18853 CVE-2024-28390 · GHSA-jj3x-6fjg-wcr7

An issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01…

MEDIUM 50

An issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01, allows a remote attacker to escalate privileges and obtain sensitive information via Improper Access Control.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0063 Published 2024-03-14 No fix listed CWE-284

TI-2023-14173 CVE-2023-30200 · GHSA-cmg5-2pfg-5x43

In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” (ultimateimagetool) in…

LOW 34

In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” (ultimateimagetool) in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by perf…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00667 Published 2023-07-20 No fix listed CWE-22

Vulnerabilities

Filters

An issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01…

In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” (ultimateimagetool) in…