Critical severity9.8NVD Advisory· Published Mar 31, 2023· Updated Jun 17, 2026
CVE-2023-26858
CVE-2023-26858
Description
SQL injection vulnerability found in PrestaSHp faqs v.3.1.6 allows a remote attacker to escalate privileges via the faqsBudgetModuleFrontController::displayAjaxGenerateBudget component.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- PrestaSHp/faqsdescription
- Range: <3.1.6
Patches
Vulnerability mechanics
References
2- friends-of-presta.github.io/security-advisories/modules/2023/03/28/faqs.htmlnvdExploitPatchThird Party Advisory
- addons.prestashop.com/en/faq-frequently-asked-questions/16036-frequently-asked-questions-faq-page.htmlnvdProduct
News mentions
0No linked articles in our index yet.