CVE-2023-45381

2023-10-1900:00:00

mitre

www.cve.org

cve-2023-45381

creative popup

webshopworks

prestashop

sql injection

10 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.0%

JSON

In the module “Creative Popup” (creativepopup) up to version 1.6.9 from WebshopWorks for PrestaShop, a guest can perform SQL injection via cp_download_popup().

References

addons.prestashop.com/fr/pop-up/39348-creative-popup.html

security.friendsofpresta.org/modules/2023/10/19/creativepopup.html