CVE-2023-39524
PrestaShop vulnerable to boolean SQL injection in search product in BO
Summary
PrestaShop vulnerable to boolean SQL injection in search product in BO
Original description
The description as published by the source.
PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, SQL injection possible in the product search field, in BO's product page. Version 8.1.1 contains a patch for this issue. There are no known workarounds.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com