Unrated severityNVD Advisory· Published Oct 3, 2023· Updated Sep 20, 2024

CVE-2023-39646

Description

Improper neutralization of SQL parameter in Theme Volty CMS Category Chain Slider module for PrestaShop. In the module “Theme Volty CMS Category Chain Slide"(tvcmscategorychainslider) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Theme Volty/CMS Category Chain Sliderdescription
Prestashop/tvcmscategorychainsliderllm-create
Range: <=4.0.1

Patches

Vulnerability mechanics

Synthesis attempt was rejected by the grounding validator. Re-run pending.

References

security.friendsofpresta.org/modules/2023/09/26/tvcmscategorychainslider.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000