Critical severity9.8NVD Advisory· Published Feb 27, 2024· Updated Jun 17, 2026

CVE-2024-25843

Description

In the module "Import/Update Bulk Product from any Csv/Excel File Pro" (ba_importer) up to version 1.1.28 from Buy Addons for PrestaShop, a guest can perform SQL injection in affected versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Prestashop/Import\/update Bulk Product
cpe:2.3:a:prestashop:import\/update_bulk_product:*:*:*:*:*:prestashop:*:*
Range: <1.1.29
Buy Addons for PrestaShop/Import/Update Bulk Product from any Csv/Excel File Prodescription
Buy Addons/Import/Update Bulk Product from any Csv/Excel File Prollm-create
Range: <=1.1.28

Patches

Vulnerability mechanics

References

security.friendsofpresta.org/modules/2024/02/27/ba_importer.htmlnvdPatchThird Party Advisory
addons.prestashop.com/en/data-import-export/20579-import-update-bulk-product-from-any-csv-excel-file-pro.htmlnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000