Critical severity9.8NVD Advisory· Published Apr 17, 2023· Updated Jun 17, 2026

CVE-2023-27844

Description

SQL injection vulnerability found in PrestaShopleurlrewrite v.1.0 and before allow a remote attacker to gain privileges via the Dispatcher::getController component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Litextension/Leurlrewrite
cpe:2.3:a:litextension:leurlrewrite:*:*:*:*:*:prestashop:*:*
Range: <=1.0
Prestashop/leurlrewritecpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=1.0

Patches

Vulnerability mechanics

References

friends-of-presta.github.io/security-advisories/modules/2023/04/13/leurlrewrite.htmlnvdPatchThird Party Advisory
litextension.com/migration-services/seo-urls-migrations.htmlnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000