Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Apollo Theme Clear all filters
TI-2024-06163 CVE-2024-6648 · GHSA-6m2f-83vf-p7fj

Path Traversal in AP Page Builder

Priority MEDIUM 45

Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'product_item_path' within the 'config' JSON file, allowing them to read any file…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00696 Published 2025-05-08 Fixed in 4.0.0 CWE-22
TI-2022-22083 CVE-2022-44897 · GHSA-pcfq-64f7-vjxp

A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component…

Priority LOW 29

A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component through 2.4.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the show_number parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00811 Published 2023-01-31 No fix listed CWE-79
TI-2022-07099 CVE-2022-22897 · GHSA-9j8j-w6vx-vqfr

A SQL injection vulnerability in the product_all_one_img and image_product parameters of…

Priority MEDIUM 57

A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1365 Published 2022-08-29 No fix listed CWE-89