HiprestaCVEs & Vulnerabilities
2 CVEs affecting Hipresta products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
2 CVEs→ All vendors
Most Affected Products
carousels pack 1gift wrapping pro 1
CVE-2024-24303CRITICAL
SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" (hiadvancedgiftwrapping) module for PrestaShop before version 1.4.1, allows remote attackers to escalate privileges and obtain sensitive information via the HiAdvancedGiftWrappingGiftWrappingModuleFrontController::addGiftWrappingCartValue() method.
7 Feb 2024
9.8
CVSS
CVE-2023-45376CRITICAL
In the module "Carousels Pack - Instagram, Products, Brands, Supplier" (hicarouselspack) for PrestaShop up to version 1.5.0 from HiPresta for PrestaShop, a guest can perform SQL injection via HiCpProductGetter::getViewedProduct().`
19 Oct 2023
9.8
CVSS
← PrevPage 1 / 1Next →