Aftermail vulnerabilities

1 known vulnerability in Aftermail from Shoprunners. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Aftermail: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-30154Oct 14, 2023Shoprunners

  Multiple improper neutralization of SQL parameters in module AfterMail (aftermailpresta) for PrestaShop, before version 2.2.1, allows remote attackers to perform SQL injection attacks via `id_customer`, `id_conf`, `id_product` and `token` parameters in `afterm