CVE-2024-25843: SQL Injection
In the module "Import/Update Bulk Product from any Csv/Excel File Pro" (baimporter) up to version 1.1.28 from Buy Addons for PrestaShop, a guest can perform SQL injection in affected versions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25843?
CVE-2024-25843 has a high severity rating due to its potential for SQL injection vulnerabilities that can be exploited by guests.
How do I fix CVE-2024-25843?
To fix CVE-2024-25843, update the "Import/Update Bulk Product from any Csv/Excel File Pro" module to a version later than 1.1.28.
Who is affected by CVE-2024-25843?
Websites using the "Import/Update Bulk Product from any Csv/Excel File Pro" module up to version 1.1.28 are vulnerable to CVE-2024-25843.
What is SQL injection in the context of CVE-2024-25843?
In the context of CVE-2024-25843, SQL injection allows an unauthenticated user to manipulate database queries through the vulnerable module.
What are the implications of CVE-2024-25843 for online stores?
CVE-2024-25843 can lead to unauthorized access and data manipulation, posing serious risks to the integrity of online store databases.