Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2023-39524

PrestaShop vulnerable to boolean SQL injection in search product in BO

Description

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, SQL injection possible in the product search field, in BO's product page. Version 8.1.1 contains a patch for this issue. There are no known workarounds.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PrestaShop PrestaShop

  • < 8.1.1affected

References