Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Hipresta Clear all filters
TI-2024-16070 CVE-2024-24303 · GHSA-3mpj-wgvw-fw9v

SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" (hiadvancedgiftwrapping)…

Priority MEDIUM 50

SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" (hiadvancedgiftwrapping) module for PrestaShop before version 1.4.1, allows remote attackers to escalate privileges and obtain sensitive information via the HiA…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00676 Published 2024-02-07 No fix listed CWE-89
TI-2023-24331 CVE-2023-45376 · GHSA-42hr-vjrg-wjr7

In the module "Carousels Pack - Instagram, Products, Brands, Supplier" (hicarouselspack)…

Priority MEDIUM 44

In the module "Carousels Pack - Instagram, Products, Brands, Supplier" (hicarouselspack) for PrestaShop up to version 1.5.0 from HiPresta for PrestaShop, a guest can perform SQL injection via HiCpProductGetter::getViewed…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00797 Published 2023-10-19 No fix listed CWE-89