Idnovate vulnerabilities
We track 2 vulnerabilities in Idnovate products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2023.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Idnovate vulnerabilities
- 7.5 High severity
Superuser: Incorrect Authorization
An issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser before v2.4.2 allows attackers to bypass authentication via a crafted HTTP call.
- 9.8 Critical severity
Popup Module (on Entering, Exit Popup, Add…: Improper Neutralization of Special Elements used in an SQL Command
Prestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a SQL injection vulnerability via the component AdvancedPopup::getPopups().