CVE-2023-50029

Published: 2024-06-24T23:15Z

Last Modified: 2024-11-21T08:36Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

PHP Injection vulnerability in the module "M4 PDF Extensions" (m4pdf) up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers to run arbitrary code via the M4PDF::saveTemplate() method. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt