Communitydeveloper - vulnerabilities (CVEs)

3 CVEs in 3 products, 0 in the last 30 days, newest from 2024-04-29.

Products

• Amazzing Filter - 1 CVEs
• Import/update Bulk Product From Any Csv/excel File Pro - 1 CVEs
• Prestaddons Flashsales - 1 CVEs

Newest CVEs of Communitydeveloper

• CVE-2024-33269 - CVSS 9.8 (critical), 2024-04-29: SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method.
• CVE-2024-25843 - CVSS 9.8 (critical), 2024-02-27: In the module "Import/Update Bulk Product from any Csv/Excel File Pro" (ba_importer) up to version 1.1.28 from Buy Addons for PrestaShop, a guest can perform…
• CVE-2023-48042 - CVSS 6.1 (medium), 2023-11-28: Cross Site Scripting (XSS) in Search filters in Prestashop Amazzing filter version up to version 3.2.5, allows remote attackers to inject arbitrary JavaScript…