Share:

CVE-2023-34577 - Planned Popup Project Planned Popup

September 21, 2023

Critical 9.8

SQL injection vulnerability in Prestashop opartplannedpopup 1.4.11 and earlier allows remote attackers to run arbitrary SQL commands via OpartPlannedPopupModuleFrontController::prepareHook() method.

Affected software

Planned Popup Project Planned Popup

Reference links

https://security.friendsofpresta.org/modules/2023/09/19/opartplannedpopup.html

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.