Description
In the module "Carousels Pack - Instagram, Products, Brands, Supplier" (hicarouselspack) for PrestaShop up to version 1.5.0 from HiPresta for PrestaShop, a guest can perform SQL injection via HiCpProductGetter::getViewedProduct().`
Unscored
CVE-2023-45376
EUVD-2023-49668GHSA-42hr-vjrg-wjr7
In the module "Carousels Pack - Instagram, Products, Brands, Supplier" (hicarouselspack) for PrestaShop up to version 1.5.0 from HiPresta f…
Published Oct 19, 2023 · Updated Sep 13, 2024 · Assigned by mitre