← All advisories

High severity8.8NVD Advisory· Published Mar 6, 2023· Updated Jun 17, 2026

CVE-2023-24763

CVE-2023-24763

Description

In the module "Xen Forum" (xenforum) for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Prestashop/Xen Forum2 versions
cpe:2.3:a:prestashop:xen_forum:*:*:*:*:*:prestashop:*:*+ 1 more
- cpe:2.3:a:prestashop:xen_forum:*:*:*:*:*:prestashop:*:*range: <2.13.0
- (no CPE)range: <=2.13.0
FriendsOfPresta/Xen Forumllm-create
Range: <=2.13.0

Patches

Vulnerability mechanics

References

2

friends-of-presta.github.io/security-advisories/modules/2023/03/06/xenforum.htmlnvdExploitPatchThird Party Advisory
addons.prestashop.com/en/blog-forum-new/19299-xen-forum.htmlnvdProduct

News mentions

0

No linked articles in our index yet.