Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-27	CVE-2023-46349	SQL Injection vulnerability in Myprestamodules Updateproducts 3.7.6 In the module "Product Catalog (CSV, Excel) Export/Update" (updateproducts) < 3.8.5 from MyPrestaModules for PrestaShop, a guest can perform SQL injection. network low complexity myprestamodules CWE-89 critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.