CVE-2023-25207

PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-03-13

Last modified

2026-10-24

Weaknesses

CWE-89

Affected products

• Dpd France (Prestashop)

References

• https://addons.prestashop.com/fr/transporteurs/19414-dpd-france.html
• https://friends-of-presta.github.io/security-advisories/modules/2023/03/09/dpdfrance.html