Description
In the module "Product Catalog (CSV, Excel) Import" (simpleimportproduct) <= 6.7.0 from MyPrestaModules for PrestaShop, a guest can upload files with extensions .php.
Critical · 9.1
CVE-2024-25846
EUVD-2024-23153GHSA-xfr8-9c6p-qpcj
In the module "Product Catalog (CSV, Excel) Import" (simpleimportproduct) <= 6.7.0 from MyPrestaModules for PrestaShop, a guest can upload …
Published Feb 27, 2024 · Updated Aug 8, 2024 · Assigned by mitre