Updateproducts vulnerabilities

1 known vulnerability in Updateproducts from Myprestamodules. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Updateproducts: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-46349Nov 27, 2023Myprestamodules

  In the module "Product Catalog (CSV, Excel) Export/Update" (updateproducts) < 3.8.5 from MyPrestaModules for PrestaShop, a guest can perform SQL injection. The method `productsUpdateModel::getExportIds()` has sensitive SQL calls that can be executed with a tri