Unrated severityNVD Advisory· Published Feb 27, 2024· Updated Aug 29, 2024

CVE-2024-25843

Description

In the module "Import/Update Bulk Product from any Csv/Excel File Pro" (ba_importer) up to version 1.1.28 from Buy Addons for PrestaShop, a guest can perform SQL injection in affected versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Buy Addons for PrestaShop/Import/Update Bulk Product from any Csv/Excel File Prodescription
Prestashop/ba_importerllm-create
Range: <=1.1.28

Patches

Vulnerability mechanics

References

addons.prestashop.com/en/data-import-export/20579-import-update-bulk-product-from-any-csv-excel-file-pro.htmlmitre
security.friendsofpresta.org/modules/2024/02/27/ba_importer.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000