VYPR
Critical severity9.8NVD Advisory· Published Jun 24, 2024· Updated Apr 15, 2026

CVE-2024-34988

CVE-2024-34988

Description

SQL injection vulnerability in the module "Complete for Create a Quote in Frontend + Backend Pro" (askforaquotemodul) <= 1.0.51 from Buy Addons for PrestaShop allows attackers to view sensitive information and cause other impacts via methods AskforaquotemodulcustomernewquoteModuleFrontController::run(), AskforaquotemoduladdproductnewquoteModuleFrontController::run(), AskforaquotemodulCouponcodeModuleFrontController::run(), AskforaquotemodulgetshippingcostModuleFrontController::run(), AskforaquotemodulgetstateModuleFrontController::run().

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.