CVE-2023-45378

Summary

CVE-2023-45378 is a new SQL injection vulnerability affecting the PrestaBlog module (prestablog) in HDclic for PrestaShop, versions 4.4.7 and earlier. An unauthenticated guest can manipulate input fields in the ajax slider_positions.php script to inject malicious SQL queries. This vulnerability can be exploited to forge SQL statements and potentially gain unauthorized access to sensitive data or execute malicious code. Users are urged to update to the latest version of PrestaBlog to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.