CVE-2024-34993: SQL Injection
In the module "Bulk Export products to Google Merchant-Google Shopping" (bagoogleshopping) up to version 1.0.26 from Buy Addons for PrestaShop, a guest can perform SQL injection viaGenerateCategories::renderCategories().
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34993?
CVE-2024-34993 is rated as a high severity vulnerability due to the SQL injection that can be exploited by unauthenticated guest users.
How do I fix CVE-2024-34993?
To fix CVE-2024-34993, update the 'Bulk Export products to Google Merchant-Google Shopping' module to version 1.0.27 or later.
Who is affected by CVE-2024-34993?
All users of the 'Bulk Export products to Google Merchant-Google Shopping' module version 1.0.26 and prior on PrestaShop are affected by CVE-2024-34993.
What type of vulnerability is CVE-2024-34993?
CVE-2024-34993 is an SQL injection vulnerability that allows attackers to manipulate database queries.
Can attackers escalate privileges using CVE-2024-34993?
Yes, attackers can exploit CVE-2024-34993 to execute arbitrary SQL queries, which may lead to privilege escalation and data exposure.