Security Advisory

CVE-2023-45386

9.8
CRITICAL

Vulnerability Description

In the module extratabspro before version 2.2.8 from MyPresta.eu for PrestaShop, a guest can perform SQL injection via `extratabspro::searchcategory()`, `extratabspro::searchproduct()` and `extratabspro::searchmanufacturer().'
Published Date October 17, 2023
Official Source NIST NVD Advisory