Description (CNA)
Shoppingfeed PrestaShop is an add-on to the PrestaShop ecommerce platform to synchronize data. The module Shoppingfeed for PrestaShop is vulnerable to SQL injection between version 1.4.0 and 1.8.2 due to a lack of input sanitization. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| shoppingflux / module-prestashop | affected >= 1.4.0, < 1.8.3 |
CWE
CWE-89
References
- https://github.com/shoppingflux/module-prestashop/security/advisories/GHSA-vfmq-w777-qvcf
- https://github.com/shoppingflux/module-prestashop/pull/209
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.