Vulnerabilities > Prestashop > PK Customlinks > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-06-19 CVE-2024-36684 SQL Injection vulnerability in Prestashop PK Customlinks
In the module "Custom links" (pk_customlinks) <= 2.3 from Promokit.eu for PrestaShop, a guest can perform SQL injection.
network
low complexity
prestashop CWE-89
critical
9.8