SQL Injection Vulnerability in PrestaShop Module by PrestaShop
CVE-2024-28392

Currently unrated

Key Information:

Vendor

PrestaShop

Vendor
CVE Published:
20 March 2024

What is CVE-2024-28392?

The PSCartAbandonmentPro module for PrestaShop contains a SQL injection vulnerability in versions up to 2.0.11. An attacker can exploit this flaw through the pscartabandonmentproFrontCAPUnsubscribeJobModuleFrontController::setEmailVisualized() method, which could allow unauthorized access and potential privilege escalation. It is crucial for users to apply the latest updates or patches provided by PrestaShop to mitigate this security risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.