Critical
CVE-2023-29632
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 257
Reset filters
Critical
CVE-2023-29630
Blind SQL injection vulnerability in Jms Vertical MegaMenu (jmsvermegamenu) PrestaShop module
Critical
CVE-2023-27034
Blind SQL injection vulnerability in Jms Blog (jmsblog) PrestaShop module
Medium
CVE-2023-25170
Possible CSRF token fixation (CWE-352)
Critical
CVE-2023-25207
Multiple improper neutralization of SQL parameters in DPD France module for PrestaShop
High
CVE-2023-24763
Multiple improper neutralization of SQL parameters in XenForum module for PrestaShop
Critical
CVE-2023-23315
Improper neutralization of an SQL parameter in stripejs module for PrestaShop
High
CVE-2022-46965
Improper neutralization of an SQL parameter in Administrative Mandate module for PrestaShop
High
CVE-2022-46639
Directory traversal in the descarga_etiqueta.php component of Correos PrestaShop
Critical
CVE-2023-26864
Blind SQL injection vulnerability in Redirections Manager (smplredirectionsmanager) PrestaShop module
Medium
CVE-2022-46158
PrestaShop has potential Information exposure in the upload directory
Critical
CVE-2022-44727
Blind SQL injection vulnerability in PrestaShop lgcookieslaw module
Critical
CVE-2022-40839
Improper neutralization of SQL parameter in NdkAdvancedCustomizationFields module for PrestaShop
Critical
CVE-2022-40842
Server-Side Request Forgery (SSRF) NdkAdvancedCustomizationFields from ndk design a module for PrestaShop
Medium
CVE-2022-40840
[CVE-2022-40841] Possible XSS T1 and T2 in Ndk advanced custom fields module from ndkdesign for PrestaShop
Critical
CVE-2022-22897
Major updates > SQL Injections in PrestaShop appagebuilder module up to 2.4.5
Medium
CVE-2022-35933
PrestaShop Product Comments Cross-site Scripting vulnerability
Critical
CVE-2022-31181
Chain: SQL Injection (CWE-89) and Eval Injection (CWE-95)
High
CVE-2022-31101
Invalid order neutralization in an SQL query in PrestaShop blockwishlist module
Medium
CVE-2019-11876
PrestaShop Cross-site Scripting vulnerability
High
CVE-2018-20717
PrestaShop PHP Object Injection
Medium
CVE-2013-4791
PrestaShop Stored Cross-Site Scripting Vulnerability
High
CVE-2023-30839
SQL filter bypass leading to arbitrary write requests using SQL Manager [DEBATE RUNNING ABOUT SCORING FROM PS CORE]
High
CVE-2023-30838
Possible XSS injection through Validate::isCleanHTML method
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.