CVE-2023-27847

18Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 4.7%

probabilidade de exploração

4.7%top 9% das CVEs

exploração observada

nãonenhuma fonte reporta

SQL injection vulnerability found in PrestaShop xipblog v.2.0.1 and before allow a remote attacker to gain privileges via the xipcategoryclass and xippostsclass components.

Produtos afetados

n/a · n/a

Referências

https://friends-of-presta.github.io/security-advisories/modules/2023/03/23/xipblog.html https://github.com/xpert-idea/xipblog/