Vulnerability Details CVE-2023-25207
PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.9%
CVSS Severity
CVSS v3 Score 9.8
References
- https://addons.prestashop.com/fr/transporteurs/19414-dpd-france.html
- https://friends-of-presta.github.io/security-advisories/modules/2023/03/09/dpdfrance.html
- https://addons.prestashop.com/fr/transporteurs/19414-dpd-france.html
- https://friends-of-presta.github.io/security-advisories/modules/2023/03/09/dpdfrance.html
Products affected by CVE-2023-25207
-
cpe:2.3:a:prestashop:dpd_france:-