Kerawen vulnerabilities
We track 2 vulnerabilities in Kerawen products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2023.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Kerawen vulnerabilities
- 9.8 Critical severity
Kerawen: Improper Neutralization of Special Elements used in an SQL Command
kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocs_id_cart parameter at KerawenDeliveryModuleFrontController::initContent().
- 9.8 Critical severity
Omnichannel Stocks: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability found in PrestaShop lekerawen_ocs before v.1.4.1 allow a remote attacker to gain privileges via the KerawenHelper::setCartOperationInfo, and KerawenHelper::resetCheckoutSessionData components.