Activedesign vulnerabilities
We track 2 vulnerabilities in Activedesign products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 15, 2023.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Activedesign vulnerabilities
- 9.8 Critical severity
newsletter_popup_pro: Improper Neutralization of Special Elements used in an SQL Command
In the module "Newsletter Popup PRO with Voucher/Coupon code" (newsletterpop) before version 2.6.1 from Active Design for PrestaShop, a guest can perform SQL injection in affected versions. The method `NewsletterpopsendVerificationModuleFrontController::checkE
- 9.8 Critical severity
Full Affiliates: Improper Neutralization of Special Elements used in an SQL Command
Active Design psaffiliate before v1.9.8 was discovered to contain a SQL injection vulnerability via the component PsaffiliateGetaffiliatesdetailsModuleFrontController::initContent().