CVE-2024-24303

Published: 2024-02-07T09:15Z

Last Modified: 2024-11-21T08:59Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" (hiadvancedgiftwrapping) module for PrestaShop before version 1.4.1, allows remote attackers to escalate privileges and obtain sensitive information via the HiAdvancedGiftWrappingGiftWrappingModuleFrontController::addGiftWrappingCartValue() method. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt