Unrated severityNVD Advisory· Published Mar 8, 2024· Updated Apr 16, 2025

CVE-2024-25849

Description

In the module "Make an offer" (makeanoffer) <= 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer() and MakeOffers::addUserOffer()` .

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PrestaToolKit/Make an offerdescription
Prestashop/makeanofferllm-create
Range: <=1.7.1

Patches

Vulnerability mechanics

References

addons.prestashop.com/en/price-management/19507-make-an-offer.htmlmitre
security.friendsofpresta.org/modules/2024/03/05/makeanoffer.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000