Critical severity9.8NVD Advisory· Published Oct 19, 2023· Updated Jun 17, 2026
CVE-2023-45381
CVE-2023-45381
Description
In the module "Creative Popup" (creativepopup) up to version 1.6.9 from WebshopWorks for PrestaShop, a guest can perform SQL injection via cp_download_popup().
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:webshopworks:creativepopup:*:*:*:*:*:prestashop:*:*+ 2 more
- cpe:2.3:a:webshopworks:creativepopup:*:*:*:*:*:prestashop:*:*range: <1.6.10
- (no CPE)
- (no CPE)range: <=1.6.9
Patches
Vulnerability mechanics
References
2- security.friendsofpresta.org/modules/2023/10/19/creativepopup.htmlnvdThird Party Advisory
- addons.prestashop.com/fr/pop-up/39348-creative-popup.htmlnvdProduct
News mentions
0No linked articles in our index yet.