← Back to CVE List

CVE-2024-25843

Published: 2024-02-27T17:15Z
Last Modified: 2024-11-21T09:01Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
In the module "Import/Update Bulk Product from any Csv/Excel File Pro" (ba_importer) up to version 1.1.28 from Buy Addons for PrestaShop, a guest can perform SQL injection in affected versions. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt