Description
In the module "Creative Popup" (creativepopup) up to version 1.6.9 from WebshopWorks for PrestaShop, a guest can perform SQL injection via `cp_download_popup().`
Unscored
CVE-2023-45381
EUVD-2023-49673GHSA-p47p-mr97-m42h
In the module "Creative Popup" (creativepopup) up to version 1.6.9 from WebshopWorks for PrestaShop, a guest can perform SQL injection via …
Published Oct 19, 2023 · Updated Sep 12, 2024 · Assigned by mitre