Vulnerabilities > Hipresta > Gift Wrapping PRO > 1.4.0

DATE CVE VULNERABILITY TITLE RISK
2024-02-07 CVE-2024-24303 SQL Injection vulnerability in Hipresta Gift Wrapping PRO 1.4.0
SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" (hiadvancedgiftwrapping) module for PrestaShop before version 1.4.1, allows remote attackers to escalate privileges and obtain sensitive information via the HiAdvancedGiftWrappingGiftWrappingModuleFrontController::addGiftWrappingCartValue() method.
network
low complexity
hipresta CWE-89
critical
9.8