Description
SQL Injection vulnerability in Hero hfheropayment v.1.2.5 and before allows an attacker to escalate privileges via the HfHeropaymentGatewayBackModuleFrontController::initContent() function.
Critical · 9.8
CVE-2024-33267
EUVD-2024-31012GHSA-mx5j-cp8j-55g8
SQL Injection vulnerability in Hero hfheropayment v.1.2.5 and before allows an attacker to escalate privileges via the HfHeropaymentGateway…
Published Apr 30, 2024 · Updated Aug 2, 2024 · Assigned by mitre