CVE-2023-39645

Summary

CVE-2023-39645 is a vulnerability affecting the Theme Volty CMS Payment Icon module for PrestaShop, identified as tvcmspaymenticon. This issue allows SQL injection, enabling unauthorized users to execute malicious SQL queries. The impacted module, version 4.0.1 and below, is developed by Theme Volty for PrestaShop. A guest can exploit this vulnerability to gain unauthorized access to sensitive data or even take control of the underlying database. It is crucial for users to update their modules to the latest, secure version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.