CVE-2023-39649

Summary

CVE-2023-39649: A vulnerability has been identified in the Theme Volty CMS Category Slider module for PrestaShop, specifically in versions up to 4.0.1. This issue involves improper neutralization of SQL parameters, which allows guests to execute SQL injection attacks on the module. Consequently, unauthorized access or data manipulation could occur, posing a significant risk to the affected system. The vulnerability can be exploited by malicious actors to gain unauthorized access to sensitive data or modify the database in unwanted ways. It is imperative for users to update to the latest version of the module to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.