Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-50026 EUVD-2023-54856GHSA-g2c3-j72p-x7pv

SQL injection vulnerability in Presta Monster "Multi Accessories Pro" (hsmultiaccessoriespro) module for PrestaShop versions 5.1.1 and befo…

Published Feb 9, 2024 · Updated May 15, 2025 · Assigned by mitre

Description

SQL injection vulnerability in Presta Monster "Multi Accessories Pro" (hsmultiaccessoriespro) module for PrestaShop versions 5.1.1 and before, allows remote attackers to escalate privileges and obtain sensitive information via the method HsAccessoriesGroupProductAbstract::getAccessoriesByIdProducts().

References