CVE advisoryCRITICAL
CVE-2023-30191
PrestaShop cdesigner SQL Injection Vulnerability
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability exists in the cdesigner module for the PrestaShop e-commerce platform, allowing unauthenticated attackers to potentially access or modify sensitive data by manipulating database queries through a specific web request.