Vulnerabilities (CVE)

Filtered by vendor Storecommander Subscribe
Filtered by product Scquickaccounting
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-30281 1 Storecommander 1 Scquickaccounting 2024-02-28 N/A 6.5 MEDIUM
Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store Commander for PrestaShop, a guest can access exports from the module which can lead to leak of personnal informations from ps_customer table sush as name / surname / email