Approved changes feed: RSS · Atom

cpe:2.3:a:common-services:so_flexibilite:*:*:*:*:*:prestashop:*:*

part: a version: * update: *

VendorCommon Services (82e8fce6-398d-5c69-a740-a8e7f2b6d85e)
ProductSo Flexibilite (0e387aa6-04c1-575e-88d7-9a98a260388c)
Edition*
Language*
Software edition*
Target softwareprestashop
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25844 vulnerable 2026-06-08 06:31:23.907738 Details available
An issue was discovered in Common-Services "So Flexibilite" (soflexibilite) module for PrestaShop before version 4.1.26, allows remote attackers to escalate privileges and obtain sensitive information via debug file.
Published: 2024-03-03T00:00:00.000Z
Updated: 2025-03-27T16:39:02.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25841 vulnerable 2026-06-08 06:31:23.903264 Details available
In the module "So Flexibilite" (soflexibilite) from Common-Services for PrestaShop < 4.1.26, a guest (authenticated customer) can perform Cross Site Scripting (XSS) injection.
Published: 2024-02-27T00:00:00.000Z
Updated: 2024-11-20T21:37:39.931Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.