ZeroHour

CVE-2023-50027

PoC
CVSS 3.1
9.8 critical
EPSS
<1%p53
Published
()
Modified
Description

SQL Injection vulnerability in Buy Addons baproductzoommagnifier module for PrestaShop versions 1.0.16 and before, allows remote attackers to escalate privileges and gain sensitive information via BaproductzoommagnifierZoomModuleFrontController::run() method.

Vendors
buy-addons
Products
bazoom magnifier
Ecosystems
E-commerce
Weakness
CWE-89
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.