prestaddons_flashsales vulnerabilities
1 known vulnerability in prestaddons_flashsales from Communitydeveloper. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
prestaddons_flashsales: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method.