CVE-2023-39677

PoC —

CVSS 3.1

7.5 high

EPSS

32%p98

Published

Sep 20, 2023 (Sep 20, 2023)

Modified

Jun 17, 2026

Description

MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php.

Vendors: myprestamodules updateproducts project
Products: product catalog \(csv\, excel\) import, updateproducts
Ecosystems: E-commerce
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (32.1%)

In the news0 stories

No ingested article mentions this CVE yet.