Approved changes feed: RSS · Atom

cpe:2.3:a:prestashop:blockwishlist:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPrestashop (236a7260-6e18-5f0f-b33a-a013be210d8c)
ProductBlockwishlist (b077061f-bd22-5e87-96a2-86bff890b25a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/prestashop/blockwishlist purl2cpe 2026-06-01 10:15:08.048020

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-31101 vulnerable 2026-06-03 14:47:10.620801 SQL Injection in prestashop/blockwishlist
HIGH (8.1)
prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to upgrade. There are no known workarounds for this issue.
Published: 2022-06-27T22:15:20.000Z
Updated: 2025-04-22T17:53:16.914Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.