CVE-2022-31101highCWE-89

CVE-2022-31101: high-severity vulnerability in PrestaShop blockwishlist

SQL Injection in prestashop/blockwishlist

Published · Updated

Follow this CVE+ Monitor blockwishlist+ Monitor prestashop/blockwishlist

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 8.1epss 23%
from disclosure to weapon27 days
Published on NVDJun 27
1st PoC+27d
prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected products
PrestaShop · blockwishlist
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — PrestaShop blockwishlist

In the same product, most dangerous first.

CVE-2026-92810MEDIUMPrestaShop blockwishlist through 3.0.2 Information DisclosureEPSS 0.3%