CVE-2023-50028

CRITICAL 9.8CVE-2023-50028 · Published 19/01/2024 · updated 17/06/2026

In short

CVE-2023-50028 is a CRITICAL (CVSS 9.8) vulnerability affecting sliding cart block (prestashopmodules).
Chance of exploitation in the next 30 days (EPSS): 0.67%, higher than 52.1% of all vulnerabilities.
Fix: update to 2.3.8 or later.

Package	Affected versions	Patched versions
sliding cart block prestashopmodules	`< 2.3.8`	`2.3.8`

Description

In the module "Sliding cart block" (blockslidingcart) up to version 2.3.8 from PrestashopModules.eu for PrestaShop, a guest can perform SQL injection.

References

addons.prestashop.com/en/express-checkout-process/3321-block-sliding-cart.html · Product
security.friendsofpresta.org/modules/2024/01/16/blockslidingcart.html · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free