Approved changes feed: RSS · Atom

cpe:2.3:a:prestashop:payplug:*:*:*:*:*:prestashop:*:*

part: a version: * update: *

VendorPrestashop (236a7260-6e18-5f0f-b33a-a013be210d8c)
ProductPayplug (845db2d1-487a-5dee-970d-d972d391df97)
Edition*
Language*
Software edition*
Target softwareprestashop
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/prestashopcorp/payplug purl2cpe 2026-06-01 10:15:08.066640

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-30153 vulnerable 2026-06-03 14:51:44.882004 Details available
CRITICAL (9.8)
An SQL injection vulnerability in the Payplug (payplug) module for PrestaShop, in versions 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3.7.0 and 3.7.1, allows remote attackers to execute arbitrary SQL commands via the ajax.php front controller.
Published: 2023-07-18T00:00:00.000Z
Updated: 2024-10-28T18:21:58.936Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.