← All advisories

Critical severity9.8NVD Advisory· Published Oct 2, 2023· Updated Jun 17, 2026

CVE-2023-43980

CVE-2023-43980

Description

Presto Changeo testsitecreator up to v1.1.1 was discovered to contain a SQL injection vulnerability via the component disable_json.php.

Affected products

3

Presto Changeo/testsitecreator2 versions
cpe:2.3:a:presto-changeo:testsitecreator:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:presto-changeo:testsitecreator:*:*:*:*:*:*:*:*range: <=1.1.1
- (no CPE)range: <=1.1.1
Presto Changeo/testsitecreatordescription

Patches

Vulnerability mechanics

References

2

security.friendsofpresta.org/modules/2023/09/28/testsitecreator-89.htmlnvdBroken Link
www.presto-changeo.com/prestashop/home/158-test-site-creator.htmlnvdProduct

News mentions

0

No linked articles in our index yet.