Description
In the module "Make an offer" (makeanoffer) <= 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer()` and `MakeOffers::addUserOffer()` .
Critical · 9.8
CVE-2024-25849
EUVD-2024-23156GHSA-8c9m-4jp4-hh84
In the module "Make an offer" (makeanoffer) <= 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::c…
Published Mar 8, 2024 · Updated Apr 16, 2025 · Assigned by mitre