Critical severity9.8NVD Advisory· Published Aug 29, 2022· Updated Jun 17, 2026
CVE-2022-22897
CVE-2022-22897
Description
A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- ApolloTheme/AP PageBuilder componentdescription
<=2.4.4+ 1 more
- (no CPE)range: <=2.4.4
- cpe:2.3:a:apollotheme:ap_pagebuilder:*:*:*:*:*:prestashop:*:*range: <=2.4.5
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/168148/PrestaShop-Ap-Pagebuilder-2.4.4-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
- friends-of-presta.github.io/security-advisories/modules/2023/01/05/appagebuilder.htmlnvdExploitPatchVendor Advisory
News mentions
0No linked articles in our index yet.