Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2022-31101

SQL Injection in prestashop/blockwishlist

Description

prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to upgrade. There are no known workarounds for this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PrestaShop blockwishlist

  • >= 2.0.0, < 2.1.1affected

References