Critical severity9.8NVD Advisory· Published Apr 7, 2023· Updated Jun 17, 2026

CVE-2023-27033

Description

Prestashop cdesigner v3.1.3 to v3.1.8 was discovered to contain a code injection vulnerability via the component CdesignerSaverotateModuleFrontController::initContent().

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cdesigner Project/Cdesigner
cpe:2.3:a:cdesigner_project:cdesigner:*:*:*:*:*:prestashop:*:*
Range: >=3.1.3,<3.2.2
Prestashop/cdesignerdescription
Prestashop/cdesignerllm-fuzzy
Range: v3.1.3 to v3.1.8

Patches

Vulnerability mechanics

References

friends-of-presta.github.io/security-advisories/modules/2023/04/06/cdesigner-CWE434.htmlnvdExploitPatchThird Party Advisory
addons.prestashop.com/fr/declinaisons-personnalisation/22677-personnalisation-de-produit-product-customize.htmlnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000