Description
SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListcomments method.
Critical · 9.8
CVE-2024-28388
EUVD-2024-25486GHSA-6xfp-g425-7cw6
SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate pr…
Published Mar 14, 2024 · Updated Aug 26, 2024 · Assigned by mitre