CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It involves a SQL injection risk.
CVE
CVE-2023-45376
Severity
CRITICAL
CVSS
9.8
EPSS
0.66%
Original NVD Description
In the module "Carousels Pack - Instagram, Products, Brands, Supplier" (hicarouselspack) for PrestaShop up to version 1.5.0 from HiPresta for PrestaShop, a guest can perform SQL injection via HiCpProductGetter::getViewedProduct().`
Related CVEs
Other vulnerabilities affecting the same vendor(s)