productdesigner vulnerabilities

2 known vulnerabilities in productdesigner from Prestashopmodules. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  productdesigner: Deserialization of Untrusted Data

  CVE-2024-24302Mar 3, 2024Prestashopmodules

  An issue was discovered in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess() method.

• 7.5 High severity

  productdesigner: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-24307Mar 3, 2024Prestashopmodules

  Path Traversal vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage() method.