← All advisories

Critical severity9.8NVD Advisory· Published Sep 15, 2023· Updated Jun 17, 2026

CVE-2023-39639

CVE-2023-39639

Description

LeoTheme leoblog up to v3.1.2 was discovered to contain a SQL injection vulnerability via the component LeoBlogBlog::getListBlogs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Leotheme/leoblogllm-fuzzy3 versions
<=3.1.2+ 2 more
- (no CPE)range: <=3.1.2
- (no CPE)
- cpe:2.3:a:leotheme:leoblog:*:*:*:*:*:prestashop:*:*range: <=3.1.2

Patches

Vulnerability mechanics

References

2

security.friendsofpresta.org/modules/2023/08/31/leoblog.htmlnvdExploitPatchThird Party Advisory
addons.prestashop.com/fr/2_community-developernvdProduct

News mentions

0

No linked articles in our index yet.