Security Advisory
CVE-2024-33268
9.8
CRITICAL
Vulnerability Description
SQL Injection vulnerability in Digincube mdgiftproduct before 1.4.1 allows an attacker to run arbitrary SQL commands via the MdGiftRule::addGiftToCart method.
Published Date
April 29, 2024
Official Source
NIST NVD Advisory