Filtered by vendor Chronopost Subscriptions
Filtered by product Chronopost Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-45377 1 Chronopost 1 Chronopost 2023-11-30 9.8 Critical
In the module "Chronopost Official" (chronopost) for PrestaShop, a guest can perform SQL injection. The script PHP `cancelSkybill.php` own a sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.