CVE-2023-39643

Bl Modules xmlfeeds before v3.9.8 was discovered to contain a SQL injection vulnerability via the component SearchApiXml::Xmlfeeds().

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-09-15

Last modified

2024-09-25

Weaknesses

CWE-89

Affected products

• Xmlfeeds Pro (Blmodules)

References

• https://addons.prestashop.com/en/data-import-export/5732-xml-feeds-pro.html
• https://security.friendsofpresta.org/modules/2023/08/29/xmlfeeds.html