Vulnerabilities > Idnovate > Popup Module ON Entering Exit Popup ADD Product AND Newsletter > 1.1.21

DATE	CVE	VULNERABILITY TITLE	RISK
2023-04-12	CVE-2023-27032	SQL Injection vulnerability in Idnovate Popup Module (On Entering, Exit Popup, ADD Product) and Newsletter 1.1.21/1.1.24 Prestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a SQL injection vulnerability via the component AdvancedPopup::getPopups(). network low complexity idnovate CWE-89 critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.