Critical · 9.8 CVE-2023-27844 EUVD-2023-31580GHSA-m586-mx2j-5pc6

SQL injection vulnerability found in PrestaShopleurlrewrite v.1.0 and before allow a remote attacker to gain privileges via the Dispatcher:…

Published Apr 17, 2023 · Updated Feb 6, 2025 · Assigned by mitre

Description

SQL injection vulnerability found in PrestaShopleurlrewrite v.1.0 and before allow a remote attacker to gain privileges via the Dispatcher::getController component.

References

https://litextension.com/migration-services/seo-urls-migrations.html#page%232
https://friends-of-presta.github.io/security-advisories/modules/2023/04/13/leurlrewrite.html