supernewsletter vulnerabilities

2 known vulnerabilities in supernewsletter from Webbax. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  supernewsletter: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-33275Apr 30, 2024Webbax

  SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the product_search.php components.

• 7.5 High severity

  supernewsletter: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-25839Mar 3, 2024Webbax

  An issue was discovered in Webbax "Super Newsletter" (supernewsletter) module for PrestaShop versions 1.4.21 and before, allows local attackers to escalate privileges and obtain sensitive information.