CVE-2024-36683: SQL Injection
SQL injection vulnerability in the module "Products Alert" (productsalert) before 1.7.4 from Smart Modules for PrestaShop allows attackers to obtain sensitive information and cause other impacts via the ProductsAlertAjaxProcessModuleFrontController::initContent method.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36683?
CVE-2024-36683 is considered a critical SQL injection vulnerability that can lead to sensitive information disclosure.
How do I fix CVE-2024-36683?
To fix CVE-2024-36683, update the Smart Modules Products Alert to version 1.7.4 or later.
Which software is affected by CVE-2024-36683?
CVE-2024-36683 affects the Smart Modules for PrestaShop, specifically the Products Alert module before version 1.7.4.
What type of attack does CVE-2024-36683 enable?
CVE-2024-36683 allows attackers to perform SQL injection, potentially leading to unauthorized access to sensitive data.
Can CVE-2024-36683 impact my PrestaShop site?
Yes, if you are using an affected version of the Smart Modules Products Alert, your PrestaShop site is at risk from CVE-2024-36683.