Vulnerabilities (CVE)

Filtered by vendor Prestashop Subscribe
Filtered by product Blockwishlist
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-31101 1 Prestashop 1 Blockwishlist 2024-11-21 6.5 MEDIUM 8.1 HIGH
prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to upgrade. There are no known workarounds for this issue.