Product Catalog (csv, Excel) Import vulnerabilities

3 known vulnerabilities in Product Catalog (csv, Excel) Import from Myprestamodules. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  product_catalog_import_for_prestashop: Improper Privilege Management

  CVE-2024-25847Mar 3, 2024Myprestamodules

  SQL Injection vulnerability in MyPrestaModules "Product Catalog (CSV, Excel) Import" (simpleimportproduct) modules for PrestaShop versions 6.5.0 and before, allows attackers to escalate privileges and obtain sensitive information via Send::__construct() and im

• 9.1 Critical severity

  simpleimportproduct: Unrestricted Upload of File with Dangerous Type

  CVE-2024-25846Feb 27, 2024Myprestamodules

  In the module "Product Catalog (CSV, Excel) Import" (simpleimportproduct) <= 6.7.0 from MyPrestaModules for PrestaShop, a guest can upload files with extensions .php.

• 7.5 High severity

  Product Catalog (csv, Excel) Import: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2023-39677Sep 20, 2023MyprestamodulesEPSS 32.3%

  MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php.