Critical severity9.8NVD Advisory· Published Jun 19, 2024· Updated Apr 15, 2026
CVE-2024-33836
CVE-2024-33836
Description
In the module "JA Marketplace" (jamarketplace) up to version 9.0.1 from JA Module for PrestaShop, a guest can upload files with extensions .php. In version 6.X, the method JmarketplaceproductModuleFrontController::init() and in version 8.X, the method JmarketplaceSellerproductModuleFrontController::init() allow upload of .php files, which will lead to a critical vulnerability.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.