Exportproducts

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-45387 Nov 17, 02:15 CRITICAL PATCH Act Now

In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

SQLi Exportproducts Myprestamodules

NVD

CVSS 3.1

9.8

EPSS

0.7%

CVE-2023-46346 Oct 25, 18:17 HIGH This Week

In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 4.1.1 from MyPrestaModules for PrestaShop, a guest can download personal information without. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Exportproducts Myprestamodules

NVD

CVSS 3.1

7.5

EPSS

0.8%

CVE-2023-45387

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

SQLi Exportproducts Myprestamodules

NVD

CVE-2023-46346

EPSS 1% CVSS 7.5

HIGH This Week

Path Traversal Exportproducts Myprestamodules

NVD