Vulnerabilities

TI-2023-27368 CVE-2023-50030 · GHSA-f494-837m-pqvm

In the module "Jms Setting" (jmssetting) from Joommasters for PrestaShop, a guest can…

HIGH 82

In the module "Jms Setting" (jmssetting) from Joommasters for PrestaShop, a guest can perform SQL injection in versions <= 1.1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00666 Published 2024-01-19 No fix listed CWE-89

TI-2023-13950 CVE-2023-29632 · GHSA-c7q4-9h6h-g94j

MEDIUM 44

PrestaShop jmspagebuilder 3.x is vulnerable to SQL Injection via ajax_jmspagebuilder.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01029 Published 2023-06-06 No fix listed CWE-89

TI-2023-13949 CVE-2023-29631 · GHSA-x5g4-8j3x-9jfm

MEDIUM 50

PrestaShop jmsslider 1.6.0 is vulnerable to Incorrect Access Control via ajax_jmsslider.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00671 Published 2023-06-05 No fix listed CWE-434

TI-2023-13948 CVE-2023-29630 · GHSA-f96m-q66h-wrxf

MEDIUM 51

PrestaShop jmsmegamenu 1.1.x and 2.0.x is vulnerable to SQL Injection via ajax_jmsmegamenu.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01029 Published 2023-06-05 No fix listed CWE-89

TI-2023-11880 CVE-2023-27034 · GHSA-7jr7-v6gv-m656

HIGH 83

PrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.58743 Published 2023-03-23 No fix listed CWE-89

TI-2018-04848 CVE-2018-6581 · GHSA-wjjj-8346-227v

MEDIUM 47

SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02652 Published 2018-02-02 No fix listed CWE-89