CVE-2023-29630

PrestaShop jmsmegamenu 1.1.x and 2.0.x is vulnerable to SQL Injection via ajax_jmsmegamenu.php.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-06-05

Last modified

2025-01-31

Weaknesses

CWE-89

Affected products

• Jms Drop Mega Menu (Joommasters)

References

• https://friends-of-presta.github.io/security-advisories/modules/2023/03/13/jmsvermegamenu.html