Vulnerability Details CVE-2023-27844
SQL injection vulnerability found in PrestaShopleurlrewrite v.1.0 and before allow a remote attacker to gain privileges via the Dispatcher::getController component.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.2%
CVSS Severity
CVSS v3 Score 9.8
References
- https://friends-of-presta.github.io/security-advisories/modules/2023/04/13/leurlrewrite.html
- https://litextension.com/migration-services/seo-urls-migrations.html#page%232
- https://friends-of-presta.github.io/security-advisories/modules/2023/04/13/leurlrewrite.html
- https://litextension.com/migration-services/seo-urls-migrations.html#page%232
Products affected by CVE-2023-27844
-
cpe:2.3:a:litextension:leurlrewrite:-
-
cpe:2.3:a:litextension:leurlrewrite:1.0