Vulnerabilities > Prestashop > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-05-12 | CVE-2023-30192 | SQL Injection vulnerability in Prestashop Possearchproducts 1.7 Prestashop possearchproducts 1.7 is vulnerable to SQL Injection via PosSearch::find(). | 9.8 |
| 2023-05-10 | CVE-2023-30194 | SQL Injection vulnerability in Prestashop Poststaticfooter Prestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstaticfooter::getPosCurrentHook(). | 9.8 |
| 2023-04-25 | CVE-2023-30838 | Unspecified vulnerability in Prestashop PrestaShop is an Open Source e-commerce web application. | 9.9 |
| 2023-03-21 | CVE-2023-27569 | SQL Injection vulnerability in Prestashop EO Tags The eo_tags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or Referer header. | 9.8 |
| 2023-03-21 | CVE-2023-27570 | SQL Injection vulnerability in Prestashop EO Tags The eo_tags package before 1.4.19 for PrestaShop allows SQL injection via a crafted _ga cookie. | 9.8 |
| 2023-03-13 | CVE-2023-25207 | SQL Injection vulnerability in Prestashop DPD France PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php. | 9.8 |
| 2022-08-01 | CVE-2022-31181 | SQL Injection vulnerability in Prestashop PrestaShop is an Open Source e-commerce platform. | 9.8 |
| 2022-01-26 | CVE-2022-21686 | Code Injection vulnerability in Prestashop PrestaShop is an Open Source e-commerce platform. | 9.8 |
| 2021-12-07 | CVE-2021-43789 | Unspecified vulnerability in Prestashop PrestaShop is an Open Source e-commerce web application. | 9.8 |
| 2021-02-26 | CVE-2021-21308 | Unspecified vulnerability in Prestashop PrestaShop is a fully scalable open source e-commerce solution. | 9.1 |