Critical severity9.8NVD Advisory· Published Mar 27, 2023· Updated Jun 17, 2026

CVE-2023-27847

Description

SQL injection vulnerability found in PrestaShop xipblog v.2.0.1 and before allow a remote attacker to gain privileges via the xipcategoryclass and xippostsclass components.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PrestaShop/xipblogdescription
Xipblog Project/Xipblog
cpe:2.3:a:xipblog_project:xipblog:*:*:*:*:*:prestashop:*:*
Range: <=2.0.1
Prestashop/xipblogllm-fuzzy
Range: <=2.0.1
Friends Of Presta/xipblogllm-create
Range: <=2.0.1
Xpert Idea/xipblogllm-create
Range: <=2.0.1

Patches

Vulnerability mechanics

References

friends-of-presta.github.io/security-advisories/modules/2023/03/23/xipblog.htmlnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000