High
CVE-2024-28387
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 255
Reset filters
Critical
CVE-2024-28394
External Control of File Name or Path in Advanced Plugins - Sales Reports, Statistics, Custom Fields & Export module for PrestaShop
High
CVE-2024-28392
Improper neutralization of SQL parameter in Abandoned Cart Reminder Pro module for PrestaShop
High
CVE-2024-28396
Exposure of Sensitive Information to an Unauthorized Actor in MyPrestaModules - Orders (CSV, Excel) Export PRO module for PrestaShop
Critical
CVE-2024-28395
Improper neutralization of SQL parameter in Best-Kit - Pop-up / Schedule Popup / Splash window module for PrestaShop
Critical
CVE-2024-28390
Improper Access Control in Advanced Plugins - Image: WebP, Compress, Zoom, Lazy load, Alt & More module for PrestaShop
Critical
CVE-2024-28388
Improper neutralization of SQL parameter in SunnyToo - Product Comments module for PrestaShop
Critical
CVE-2024-28389
Improper neutralization of SQL parameters in Knowband - Entry,Exit and Subscription Popup-Spin and Win module for PrestaShop
Critical
CVE-2024-28391
Improper neutralization of SQL parameter in FME Modules - Quick Order Form - Order Table module for PrestaShop
Critical
CVE-2024-25849
Improper neutralization of SQL parameter in PrestaToolKit - Make an offer module for PrestaShop
Critical
CVE-2024-25848
Improper neutralization of SQL parameter in Team Ever - Ever Ultimate SEO module for PrestaShop
Critical
CVE-2024-25845
Improper neutralization of SQL parameter in Cleanpresta.com - CD Custom Fields 4 Orders module for PrestaShop
High
CVE-2024-25839
Exposure of Sensitive Information to an Unauthorized Actor in Webbax - Super Newsletter module for PrestaShop
High
CVE-2024-25844
Exposure of Private Personal Information to an Unauthorized Actor in Common-Services - So Flexibilite module for PrestaShop
Critical
CVE-2024-25847
Improper neutralization of SQL parameter in MyPrestaModules - Product Catalog (CSV, Excel) Import module for PrestaShop
Critical
CVE-2024-26469
Server-Side Request Forgery (SSRF) in Tunis Soft - Product Designer for PrestaShop
Critical
CVE-2024-24302
Deserialization of Untrusted Data in Tunis Soft - Product Designer module for PrestaShop
High
CVE-2024-24307
Improper Limitation of a Pathname to a Restricted Directory in Tunis Soft - Product Designer module for PrestaShop
Critical
CVE-2024-25842
External Control of File Name or Path in Presta World - Account Manager - Sales Representative & Dealers - CRM module for PrestaShop
Critical
CVE-2024-25841
Improper Neutralization of Input During Web Page Generation in Common-Services - So Flexibilite module for PrestaShop
Critical
CVE-2024-25846
Unrestricted Upload of File with Dangerous Type in MyPrestaModules - Product Catalog (CSV, Excel) Import module for PrestaShop
High
CVE-2024-25840
Improper Limitation of a Pathname to a Restricted Directory in Presta World - Account Manager - Sales Representative & Dealers - CRM module for PrestaShop
Critical
CVE-2024-25843
Improper neutralization of SQL parameter in Buy Addons - Import/Update Bulk Product from any Csv/Excel File Pro module for PrestaShop
Medium
CVE-2024-26129
Path disclosure in JavaScript variable
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.