Unrated severityNVD Advisory· Published Mar 14, 2024· Updated Apr 10, 2025
CVE-2024-28391
CVE-2024-28391
Description
SQL injection vulnerability in FME Modules quickproducttable module for PrestaShop v.1.2.1 and before, allows a remote attacker to escalate privileges and obtain information via the readCsv(), displayAjaxProductChangeAttr, displayAjaxProductAddToCart, getSearchProducts, and displayAjaxProductSku methods.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- FME Modules/quickproducttable module for PrestaShopdescription
- Range: <=1.2.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.