← All advisories

Critical severity9.8NVD Advisory· Published Sep 25, 2023· Updated Jun 17, 2026

CVE-2023-39640

CVE-2023-39640

Description

UpLight cookiebanner before 1.5.1 was discovered to contain a SQL injection vulnerability via the component Hook::getHookModuleExecList().

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Uplight/Cookie Law
cpe:2.3:a:uplight:cookie_law:*:*:*:*:*:prestashop:*:*
Range: <1.5.1
UpLight/cookiebannerdescription

Patches

Vulnerability mechanics

References

1

security.friendsofpresta.org/modules/2023/09/21/cookiebanner.htmlnvdPatchVendor Advisory

News mentions

0

No linked articles in our index yet.