Vulnerabilities > Themevolty > Theme Volty CMS Blog > 4.0.8

DATE CVE VULNERABILITY TITLE RISK
2023-10-31 CVE-2023-27846 SQL Injection vulnerability in Themevolty Theme Volty CMS Blog 4.0.1/4.0.8
SQL injection vulnerability found in PrestaShop themevolty v.4.0.8 and before allow a remote attacker to gain privileges via the tvcmsblog, tvcmsvideotab, tvcmswishlist, tvcmsbrandlist, tvcmscategorychainslider, tvcmscategoryproduct, tvcmscategoryslider, tvcmspaymenticon, tvcmstestimonial components.
network
low complexity
themevolty CWE-89
critical
 9.8
9.8