Communitydeveloper vulnerabilities
We track 2 vulnerabilities in Communitydeveloper products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 29, 2024.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Communitydeveloper vulnerabilities
- 9.8 Critical severity
prestaddons_flashsales: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method.
- 9.8 Critical severity
import\/update_bulk_product_from_any_csv\/excel…: Improper Neutralization of Special Elements used in an SQL Command
In the module "Import/Update Bulk Product from any Csv/Excel File Pro" (ba_importer) up to version 1.1.28 from Buy Addons for PrestaShop, a guest can perform SQL injection in affected versions.