Critical
CVE-2023-46353
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 257
Reset filters
High
CVE-2023-46354
Exposure of Private Personal Information to an Unauthorized Actor in MyPrestaModules - Orders (CSV, Excel) Export PRO module for PrestaShop
Critical
CVE-2023-46349
Improper neutralization of SQL parameter in MyPrestaModules - Product Catalog (CSV, Excel) Export/Update module for PrestaShop
Critical
CVE-2023-48188
Improper neutralization of SQL parameter in Opart Devis for PrestaShop
High
CVE-2023-46355
Exposure of Private Personal Information to an Unauthorized Actor in Bl Modules - CSV Feeds PRO module for PrestaShop
Critical
CVE-2023-46357
Improper neutralization of SQL parameter in MyPrestaModules - Cross Selling in Modal Cart module for PrestaShop
Critical
CVE-2023-45377
Improper neutralization of SQL parameter in Chronopost - Chronopost Official module for PrestaShop
High
CVE-2023-45382
Improper Limitation of a Pathname to a Restricted Directory in Common-Services - SoNice Retour module for PrestaShop
Critical
CVE-2023-45387
Improper neutralization of SQL parameter in MyPrestaModules - Product Catalog (CSV, Excel, XML) Export PRO module for PrestaShop
Critical
CVE-2023-43979
Improper neutralization of SQL parameter in PrestaHero (ETS Soft) - BLOG - Drive High Traffic & Boost SEO module for PrestaShop
Critical
CVE-2023-47309
Improper Neutralization of Input During Web Page Generation in Nukium - NKM GLS module for PrestaShop
Medium
CVE-2023-47110
Any value can be changed in the configuration table by an employee having access to block reassurance module
Critical
CVE-2023-40923
Improper neutralization of an SQL parameter in MyPrestaModules - Orders (CSV, Excel) Export PRO module for PrestaShop
Critical
CVE-2023-47308
Improper neutralization of SQL parameter in Active Design - Newsletter Popup PRO with Voucher/Coupon code module for PrestaShop
Medium
CVE-2023-47109
PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block
High
CVE-2023-45380
Exposure of Private Personal Information to an Unauthorized Actor in Silbersaiten - Order Duplicator – Clone and Delete Existing Order module for PrestaShop
High
CVE-2023-43984
Exposure of Private Personal Information to an Unauthorized Actor in Smart Soft - Advanced Export Products Orders Cron CSV Excel module for PrestaShop
Critical
CVE-2023-40922
Improper neutralization of SQL parameter in KerAwen module for PrestaShop
Critical
CVE-2023-43982
Server-Side Request Forgery (SSRF) in Bon Presta - SocialFeed - Photos & Video/Reels using Instagram API for PrestaShop
High
CVE-2023-46352
Exposure of Private Personal Information to an Unauthorized Actor in Smart Modules - Pixel Plus: Events + CAPI + Pixel Catalog for Facebook module for PrestaShop
High
CVE-2023-44025
Improper neutralization of SQL parameter in Addify - Free Gifts module for PrestaShop
High
CVE-2023-45899
Improper Access Control in the superuser module edited by idnovate for PrestaShop
Critical
CVE-2023-45378
Improper neutralization of SQL parameter in HDclic - PrestaBlog module for PrestaShop
Critical
CVE-2023-46356
Improper neutralization of SQL parameter in Bl Modules - CSV Feeds PRO module for PrestaShop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.