In the module "Xen Forum" (xenforum) for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0.

Published Mar 6, 2023 · Updated Mar 7, 2025 · Assigned by mitre