Critical severity9.8NVD Advisory· Published Sep 15, 2023· Updated Jun 17, 2026
CVE-2023-39642
CVE-2023-39642
Description
Carts Guru cartsguru up to v2.4.2 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontController::display().
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=2.4.2+ 2 more
- (no CPE)range: <=2.4.2
- (no CPE)
- cpe:2.3:a:carts.guru:cartsguru:*:*:*:*:*:prestashop:*:*range: <2.4.3
Patches
Vulnerability mechanics
References
2- security.friendsofpresta.org/modules/2023/08/29/cartsguru.htmlnvdExploitPatchThird Party Advisory
- addons.prestashop.com/fr/remarketing-paniers-abandonnes/22077-carts-guru-marketing-automation-multicanal.htmlnvdProduct
News mentions
0No linked articles in our index yet.