ShoprunnersCVEs & Vulnerabilities

1 CVEs affecting Shoprunners products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

aftermail 1

CVE-2023-30154CRITICAL

Multiple improper neutralization of SQL parameters in module AfterMail (aftermailpresta) for PrestaShop, before version 2.2.1, allows remote attackers to perform SQL injection attacks via `id_customer`, `id_conf`, `id_product` and `token` parameters in `aftermailajax.php via the 'id_product' parameter in hooks DisplayRightColumnProduct and DisplayProductButtons.

14 Oct 2023

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database