Approved changes feed: RSS · Atom

cpe:2.3:a:prestashopmodules:themesettings:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPrestashopmodules (6954bee6-326b-52c0-abfb-fb21c631f82a)
ProductThemesettings (6cf7af63-1e33-58e8-830f-4d8f5cbb07d7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36682 vulnerable 2026-06-08 06:39:45.599626 Details available
In the module "Theme settings" (pk_themesettings) <= 1.8.8 from Promokit.eu for PrestaShop, a guest can download all email collected while SHOP is in maintenance mode. Due to a lack of permissions control, a guest can access the txt file which collect email when maintenance is enable which can lead to leak of personal information.
Published: 2024-06-24T00:00:00.000Z
Updated: 2024-08-02T03:37:05.324Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.