Vulnerabilities

Filters

1 selected

9 records

Sort

Vendor: Themevolty Clear all filters

TI-2023-12445 CVE-2023-27846 · GHSA-cxjg-wpgh-jhh5

SQL injection vulnerability found in PrestaShop themevolty v.4.0.8 and before allow a…

MEDIUM 50

SQL injection vulnerability found in PrestaShop themevolty v.4.0.8 and before allow a remote attacker to gain privileges via the tvcmsblog, tvcmsvideotab, tvcmswishlist, tvcmsbrandlist, tvcmscategorychainslider, tvcmscat…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00797 Published 2023-10-31 No fix listed CWE-89

TI-2023-20720 CVE-2023-39651 · GHSA-94h8-58cc-qx4x

Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for…

MEDIUM 50

Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop In the module “Theme Volty CMS BrandList” (tvcmsbrandlist) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perf…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00639 Published 2023-10-03 No fix listed CWE-89

TI-2023-20718 CVE-2023-39649 · GHSA-jg3f-q6gf-hm33

Improper neutralization of SQL parameter in Theme Volty CMS Category Slider module for…

MEDIUM 50

Improper neutralization of SQL parameter in Theme Volty CMS Category Slider module for PrestaShop.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00639 Published 2023-10-03 No fix listed CWE-89

TI-2023-20717 CVE-2023-39648 · GHSA-7vr6-ww8j-mxp6

Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for…

MEDIUM 50

Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00639 Published 2023-10-03 No fix listed CWE-89

TI-2023-20716 CVE-2023-39647 · GHSA-g29j-9ff7-fm97

Improper neutralization of SQL parameter in Theme Volty CMS Category Product module for…

MEDIUM 50

Improper neutralization of SQL parameter in Theme Volty CMS Category Product module for PrestaShop.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00639 Published 2023-10-03 No fix listed CWE-89

TI-2023-20715 CVE-2023-39646 · GHSA-mxc3-3p4g-2j8j

Improper neutralization of SQL parameter in Theme Volty CMS Category Chain Slider module…

MEDIUM 50

Improper neutralization of SQL parameter in Theme Volty CMS Category Chain Slider module for PrestaShop.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00639 Published 2023-10-03 No fix listed CWE-89

TI-2023-20714 CVE-2023-39645 · GHSA-44v8-gqvj-w676

Improper neutralization of SQL parameter in Theme Volty CMS Payment Icon module for…

MEDIUM 50

Improper neutralization of SQL parameter in Theme Volty CMS Payment Icon module for PrestaShop.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00602 Published 2023-10-03 No fix listed CWE-89

TI-2023-20721 CVE-2023-39652 · GHSA-8qj6-7wmc-pcwv

theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection…

MEDIUM 50

theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVideoTabConfirmDeleteModuleFrontController::run().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2023-08-28 No fix listed CWE-89

TI-2023-20719 CVE-2023-39650 · GHSA-9j35-g5vm-p6wp

Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection…

HIGH 82

Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04065 Published 2023-08-28 No fix listed CWE-89