Vulnerabilities > Activedesign > Newsletterpop > 2.5.2

DATE CVE VULNERABILITY TITLE RISK
2023-11-15 CVE-2023-47308 SQL Injection vulnerability in Activedesign Newsletterpop
In the module "Newsletter Popup PRO with Voucher/Coupon code" (newsletterpop) before version 2.6.1 from Active Design for PrestaShop, a guest can perform SQL injection in affected versions.
network
low complexity
activedesign CWE-89
critical
9.8