Approved changes feed: RSS · Atom

cpe:2.3:a:hipresta:carousels_pack:*:*:*:*:*:prestashop:*:*

part: a version: * update: *

VendorHipresta (c5b82b72-4e63-5da0-97ee-91bf42764600)
ProductCarousels Pack (bf7f636d-164b-576f-9e4d-684dd8c3cd41)
Edition*
Language*
Software edition*
Target softwareprestashop
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-45376 vulnerable 2026-06-08 06:12:42.574470 Details available
In the module "Carousels Pack - Instagram, Products, Brands, Supplier" (hicarouselspack) for PrestaShop up to version 1.5.0 from HiPresta for PrestaShop, a guest can perform SQL injection via HiCpProductGetter::getViewedProduct().`
Published: 2023-10-19T00:00:00.000Z
Updated: 2024-09-13T14:31:58.033Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.