Critical severity9.8NVD Advisory· Published Jun 19, 2024· Updated Apr 15, 2026
CVE-2024-33836
CVE-2024-33836
Description
In the module "JA Marketplace" (jamarketplace) up to version 9.0.1 from JA Module for PrestaShop, a guest can upload files with extensions .php. In version 6.X, the method JmarketplaceproductModuleFrontController::init() and in version 8.X, the method JmarketplaceSellerproductModuleFrontController::init() allow upload of .php files, which will lead to a critical vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=9.0.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.