Vulnerabilities > Prestahome

DATE CVE VULNERABILITY TITLE RISK
2021-08-20 CVE-2021-36748 SQL Injection vulnerability in Prestahome Blog
A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simpleblog) module before 1.7.8 for Prestashop allows a remote attacker to extract data from the database via the sb_category parameter.
network
low complexity
prestahome CWE-89
5.0