Critical severity9.8NVD Advisory· Published Jul 26, 2023· Updated Jun 17, 2026
CVE-2023-26859
CVE-2023-26859
Description
SQL injection vulnerability found in PrestaShop sendinblue v.4.0.15 and before allow a remote attacker to gain privileges via the ajaxOrderTracking.php component.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=4.0.15+ 1 more
- (no CPE)range: <=4.0.15
- (no CPE)
Patches
Vulnerability mechanics
References
2- security.friendsofpresta.org/modules/2023/07/25/sendinblue.htmlnvdPatchVendor Advisory
- addons.prestashop.com/en/newsletter-sms/8300-sendinblue-all-in-one-marketing-tool.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.