Description
In the module extratabspro before version 2.2.8 from MyPresta.eu for PrestaShop, a guest can perform SQL injection via `extratabspro::searchcategory()`, `extratabspro::searchproduct()` and `extratabspro::searchmanufacturer().'
Unscored
CVE-2023-45386
EUVD-2023-49678GHSA-4xch-3w57-6pj7
In the module extratabspro before version 2.2.8 from MyPresta.eu for PrestaShop, a guest can perform SQL injection via `extratabspro::searc…
Published Oct 17, 2023 · Updated Sep 13, 2024 · Assigned by mitre