CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It involves a SQL injection risk.
CVE
CVE-2024-25843
Severity
CRITICAL
CVSS
9.8
EPSS
0.57%
Original NVD Description
In the module "Import/Update Bulk Product from any Csv/Excel File Pro" (ba_importer) up to version 1.1.28 from Buy Addons for PrestaShop, a guest can perform SQL injection in affected versions.
Related CVEs
Other vulnerabilities affecting the same vendor(s)