The eo_tags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or Referer header.

Published Mar 21, 2023 · Updated Feb 26, 2025 · Assigned by mitre