Security Advisory

CVE-2023-30200

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-07-20 00:00:00
Last updated 2024-10-24 16:50:01
Assigner mitre
State PUBLISHED

Description

In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” (ultimateimagetool) in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack.