Critical · 9.8 CVE-2023-34575 EUVD-2023-38630GHSA-vcr5-684h-q8mg

SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to run arbitrary SQL commands via OpartSaveCa…

Published Sep 20, 2023 · Updated Sep 24, 2024 · Assigned by mitre

Description

SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to run arbitrary SQL commands via OpartSaveCartDefaultModuleFrontController::initContent() and OpartSaveCartDefaultModuleFrontController::displayAjaxSendCartByEmail() methods.

References

https://security.friendsofpresta.org/modules/2023/09/19/opartsavecart.html