CVE-2023-39651

—

CVSS 3.1

9.8 critical

EPSS

<1%p43

Published

Oct 3, 2023 (Oct 3, 2023)

Modified

Jun 17, 2026

Description

Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop In the module “Theme Volty CMS BrandList” (tvcmsbrandlist) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions.

Vendors: themevolty
Products: theme volty cms brandlist
Ecosystems: E-commerce
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.