Unrated severityNVD Advisory· Published Aug 29, 2022· Updated Aug 3, 2024

CVE-2022-22897

Description

A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ApolloTheme/AP PageBuilder componentdescription
Prestashop/ApolloTheme AP PageBuilderllm-create
Range: <=2.4.4

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/168148/PrestaShop-Ap-Pagebuilder-2.4.4-SQL-Injection.htmlmitre
friends-of-presta.github.io/security-advisories/modules/2023/01/05/appagebuilder.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.009
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000