Critical
CVE-2023-29629
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 91
Reset filters
Critical
CVE-2023-29631
Unrestricted upload vulnerability in Jms Slider (jmsslider) PrestaShop module
Critical
CVE-2023-29632
Blind SQL injection vulnerability in Jms Page Builder (jmspagebuilder) PrestaShop module
Critical
CVE-2023-29630
Blind SQL injection vulnerability in Jms Vertical MegaMenu (jmsvermegamenu) PrestaShop module
Critical
CVE-2023-27034
Blind SQL injection vulnerability in Jms Blog (jmsblog) PrestaShop module
Critical
CVE-2023-23315
Improper neutralization of an SQL parameter in stripejs module for PrestaShop
Critical
CVE-2023-26864
Blind SQL injection vulnerability in Redirections Manager (smplredirectionsmanager) PrestaShop module
Critical
CVE-2022-44727
Blind SQL injection vulnerability in PrestaShop lgcookieslaw module
Medium
CVE-2022-40840
[CVE-2022-40841] Possible XSS T1 and T2 in Ndk advanced custom fields module from ndkdesign for PrestaShop
Critical
CVE-2022-22897
Major updates > SQL Injections in PrestaShop appagebuilder module up to 2.4.5
Critical
CVE-2022-31181
Chain: SQL Injection (CWE-89) and Eval Injection (CWE-95)
High
CVE-2022-31101
Invalid order neutralization in an SQL query in PrestaShop blockwishlist module
High
CVE-2018-20717
PrestaShop PHP Object Injection
Critical
CVE-2021-36748
Improper neutralization of SQL parameter in SimpleBlog module from Prestahome for PrestaShop
Medium
CVE-2021-21418
Potential XSS injection in the newsletter conditions field
Critical
Exploited in attacks
CVE-2017-9841
PHUnit dependancy in PrestaShop and modules allow remote arbitrary PHP code execution
High
ghsa-769f-539v-f5jg
PrestaShop gamification module ZIP archives were vulnerable from CVE-2017-9841
High
ghsa-wqq8-mqj9-697f
PrestaShop autoupgrade module ZIP archives were vulnerable from CVE-2017-9841
High
ghsa-f884-gm86-cg3q
PrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.