Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2023-28839

Improper neutralization in an SQL query in Shoppingfeed

Description

Shoppingfeed PrestaShop is an add-on to the PrestaShop ecommerce platform to synchronize data. The module Shoppingfeed for PrestaShop is vulnerable to SQL injection between version 1.4.0 and 1.8.2 due to a lack of input sanitization. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

shoppingflux module-prestashop

  • >= 1.4.0, < 1.8.3affected

References