CVE-2023-24763: SQL Injection
First published: Mon Mar 06 2023(Updated: )
In the module "Xen Forum" (xenforum) for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Prestashop Xen Forum | <2.13.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this security issue in Xen Forum module for PrestaShop?
The vulnerability ID is CVE-2023-24763.
What is the severity rating of CVE-2023-24763?
CVE-2023-24763 has a severity rating of 8.8 (high).
How does this vulnerability affect PrestaShop Xen Forum module?
This vulnerability affects versions up to 2.13.0 of the PrestaShop Xen Forum module.
What is the CWE ID associated with CVE-2023-24763?
The CWE ID associated with CVE-2023-24763 is CWE-89 (SQL Injection).
Where can I find more information about this Xen Forum module vulnerability in PrestaShop?
You can find more information about this Xen Forum module vulnerability in PrestaShop in the references provided: [link1](https://addons.prestashop.com/en/blog-forum-new/19299-xen-forum.html), [link2](https://friends-of-presta.github.io/security-advisories/modules/2023/03/06/xenforum.html).
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/prestashop
- canonical/prestashop xen forum