Hipresta vulnerabilities
We track 2 vulnerabilities in Hipresta products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 7, 2024.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Hipresta vulnerabilities
- 9.8 Critical severity
gift_wrapping_pro: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" (hiadvancedgiftwrapping) module for PrestaShop before version 1.4.1, allows remote attackers to escalate privileges and obtain sensitive information via the HiAdvancedGiftWrappingGiftWrappingModuleFro
- 9.8 Critical severity
Carousels Pack: Improper Neutralization of Special Elements used in an SQL Command
In the module "Carousels Pack - Instagram, Products, Brands, Supplier" (hicarouselspack) for PrestaShop up to version 1.5.0 from HiPresta for PrestaShop, a guest can perform SQL injection via HiCpProductGetter::getViewedProduct().`