Critical severity9.8NVD Advisory· Published Mar 31, 2023· Updated Jun 17, 2026
CVE-2023-26858
CVE-2023-26858
Description
SQL injection vulnerability found in PrestaSHp faqs v.3.1.6 allows a remote attacker to escalate privileges via the faqsBudgetModuleFrontController::displayAjaxGenerateBudget component.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <3.1.6
- PrestaSHp/faqsdescription
- cpe:2.3:a:myprestamodules:frequently_asked_questions_page:3.1.6:*:*:*:*:prestashop:*:*
Patches
Vulnerability mechanics
References
2- friends-of-presta.github.io/security-advisories/modules/2023/03/28/faqs.htmlnvdExploitPatchThird Party Advisory
- addons.prestashop.com/en/faq-frequently-asked-questions/16036-frequently-asked-questions-faq-page.htmlnvdProduct
News mentions
0No linked articles in our index yet.