Browse CVEs

CRITICAL 9.8 CVE-2023-50061 PrestaShop Op'art Easy Redirect >= 1.3.8 and <= 1.3.12 is vulnerable to SQL Injection via Oparteasyredirect::hookActionDispatcher(). Op\'art Easy Redirect after 1.3.12 Fix from $2,3002024-02-08 CRITICAL 9.8 CVE-2023-48188 SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrary code via a crafted script t… Op\'art Devis after 4.6.12 Fix from $2,3002023-11-27 CRITICAL 9.8 CVE-2023-36263 Prestashop opartlimitquantity 1.4.5 and before is vulnerable to SQL Injection. OpartlimitquantityAlertlimitModuleFrontController::displayAjaxPushAler… Op\'art Limit Quantity 1.4.6+ Fix from $2,3002023-10-31 MEDIUM 5.4 CVE-2023-30148 Multiple Stored Cross Site Scripting (XSS) vulnerabilities in Opart opartmultihtmlblock before version 2.0.12 and Opart multihtmlblock* version 1.0.0… Multi Html Block 2.0.12+ Fix from $1,6002023-10-14 CRITICAL 9.8 CVE-2023-34576 SQL injection vulnerability in updatepos.php in PrestaShop opartfaq through 1.0.3 allows remote attackers to run arbitrary SQL commands via unspedifi… Op\'art Product Faq 1.0.4+ Fix from $2,3002023-09-21 CRITICAL 9.8 CVE-2023-34575 SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to run arbitrary SQL commands via OpartSaveCartDefaultM… Op\'art Save Cart after 2.0.7 Fix from $2,3002023-09-20 MEDIUM 5.3 CVE-2020-16194 An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2. Unauthenticated attackers can have access to an… Op\'art Devis 4.0.2+ Fix from $1,6002021-02-04