Vulnerabilities > Activedesign
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-11-15 | CVE-2023-47308 | SQL Injection vulnerability in Activedesign Newsletterpop In the module "Newsletter Popup PRO with Voucher/Coupon code" (newsletterpop) before version 2.6.1 from Active Design for PrestaShop, a guest can perform SQL injection in affected versions. | 9.8 |
| 2023-09-15 | CVE-2023-39641 | SQL Injection vulnerability in Activedesign Full Affiliates Active Design psaffiliate before v1.9.8 was discovered to contain a SQL injection vulnerability via the component PsaffiliateGetaffiliatesdetailsModuleFrontController::initContent(). | 9.8 |