Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-6921 EUVD-2023-59120GHSA-p6w5-j5f6-qqgm

SQL Injection in PrestaShop Google Integrator

Published Jan 8, 2024 · Updated Jun 16, 2025 · Assigned by CERT-PL

Description

Blind SQL Injection vulnerability in PrestaShow Google Integrator (PrestaShop addon) allows for data extraction and modification. This attack is possible via command insertion in one of the cookies.

Affected products

VendorProductAffectedFixed
PrestaShow PrestaShop Google Integrator < 2.1.4 2.1.4

References