Approved changes feed: RSS · Atom

cpe:2.3:a:smartmodules:facebookconversiontrackingplus:*:*:*:*:*:prestashop:*:*

part: a version: * update: *

VendorSmartmodules (72c79976-417c-58e0-a3e6-acca68b043d2)
ProductFacebookconversiontrackingplus (1bd21363-9cea-5874-91e3-c2e95cffd2a3)
Edition*
Language*
Software edition*
Target softwareprestashop
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46352 vulnerable 2026-06-08 06:12:45.070721 Details available
In the module "Pixel Plus: Events + CAPI + Pixel Catalog for Facebook Module" (facebookconversiontrackingplus) up to version 2.4.9 from Smart Modules for PrestaShop, a guest can download personal information without restriction. Due to a lack of permissions control, a guest can access exports from the module which can lead to a leak of personal information from ps_customer table such as name / surname / email.
Published: 2023-11-02T00:00:00.000Z
Updated: 2024-09-06T14:03:53.413Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.