VYPR

stproductcomments

by SunnyToo

CVEs (1)

  • CVE-2024-28388Mar 14, 2024
    risk 0.00cvss epss 0.01

    SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListcomments method.