ChronopostCVEs & Vulnerabilities

1 CVEs affecting Chronopost products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

chronopost 1

CVE-2023-45377CRITICAL

In the module "Chronopost Official" (chronopost) for PrestaShop, a guest can perform SQL injection. The script PHP `cancelSkybill.php` own a sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.

22 Nov 2023

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database