Critical
CVE-2023-27846
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 257
Reset filters
Critical
CVE-2023-36263
Improper neutralization of SQL parameter in Opart limit quantity for PrestaShop
Critical
CVE-2023-43139
Improper Neutralization of Special Elements used in an OS Command in the Franfinance module for PrestaShop
Critical
CVE-2023-46358
Improper neutralization of SQL parameter in Snegurka - Referral and Affiliation Program module for PrestaShop
Critical
CVE-2023-46347
Improper neutralization of SQL parameter in NDK Design - Step by Step products Pack module for PrestaShop
High
CVE-2023-46346
Improper Limitation of a Pathname to a Restricted Directory in MyPrestaModules - Product Catalog (CSV, Excel, XML) Export PRO module for PrestaShop
Critical
CVE-2023-45376
Improper neutralization of SQL parameter in HiPresta - Carousels Pack - Instagram, Products, Brands, Supplier module for PrestaShop
Critical
CVE-2023-45381
Improper neutralization of SQL parameter in WebshopWorks Creative Popup module for PrestaShop
Critical
CVE-2023-43986
Improper neutralization of SQL parameter in DM Concept - Advanced configurator for customized product module for PrestaShop
Critical
CVE-2023-45384
Unrestricted Upload of File with Dangerous Type in KnowBand - One Page Checkout, Social Login & Mailchimp module for PrestaShop
High
CVE-2023-45383
Improper Limitation of a Pathname to a Restricted Directory in Common-Services - Sonice Etiquetage module for PrestaShop
Critical
CVE-2023-45379
Improper neutralization of SQL parameter in Posthemes Rotator Img module for PrestaShop
Critical
CVE-2023-45375
Improper neutralization of SQL parameter in 01generator.com - PireosPay module for PrestaShop
Critical
CVE-2023-45386
Improper neutralization of SQL parameter in MyPresta.eu - Product Extra Tabs Pro for PrestaShop
Critical
CVE-2023-37824
Improper neutralization of SQL parameters in the Sitolog Application Connect module from Sitolog for PrestaShop
Medium
CVE-2023-30148
Multiple cross-site scripting (XSS) vulnerabilities in the Multi html block (opartmultihtmlblock) module and multihtmlblock* sub-modules from Opart for PrestaShop
Critical
CVE-2023-30154
Improper neutralization of SQL parameters in AfterMail (aftermailpresta) module from Shoprunners for PrestaShop
Critical
CVE-2023-44024
Improper neutralization of SQL parameters in KnowBand - One Page Checkout, Social Login & Mailchimp module for PrestaShop
Critical
CVE-2023-40920
Improper neutralization of an SQL parameter in prixanconnect module for PrestaShop
Critical
CVE-2023-43981
Deserialization of Untrusted Data in Presto Changeo - Test Site Creator module for PrestaShop
Critical
CVE-2023-43983
Improper neutralization of SQL parameter in Presto Changeo - Attribute Grid module for PrestaShop
Medium
CVE-2023-43663
PrestaShop allows users to uninstall modules from backoffice, even with low rights
Medium
CVE-2023-43664
PrestaShop allows employee without any access rights to list all installed modules
Critical
CVE-2023-43980
Improper neutralization of SQL parameter in Presto Changeo - Test Site Creator module for PrestaShop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.