Critical severity9.8NVD Advisory· Published Mar 14, 2024· Updated Jun 17, 2026
CVE-2024-28391
CVE-2024-28391
Description
SQL injection vulnerability in FME Modules quickproducttable module for PrestaShop v.1.2.1 and before, allows a remote attacker to escalate privileges and obtain information via the readCsv(), displayAjaxProductChangeAttr, displayAjaxProductAddToCart, getSearchProducts, and displayAjaxProductSku methods.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- cpe:2.3:a:fmemodules:b2b_quick_order_form:*:*:*:*:*:prestashop:*:*Range: <1.3.0
- FME Modules/quickproducttable module for PrestaShopdescription
- Range: <=1.2.1
- Range: <=1.2.1
Patches
Vulnerability mechanics
References
1- security.friendsofpresta.org/modules/2024/03/12/quickproducttable.htmlnvdPatchThird Party Advisory
News mentions
0No linked articles in our index yet.