Security Advisory

CVE-2024-25847

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-03-03 00:00:00

Last updated 2025-04-16 16:03:50

Assigner mitre

State PUBLISHED

Description

SQL Injection vulnerability in MyPrestaModules "Product Catalog (CSV, Excel) Import" (simpleimportproduct) modules for PrestaShop versions 6.5.0 and before, allows attackers to escalate privileges and obtain sensitive information via Send::__construct() and importProducts::_addDataToDb methods.

← Browse all CVEs View on cve.org ↗