| Package | Affected versions | Patched versions |
|---|---|---|
| stripe payment pro | < 4.5.5 | 4.5.5 |
The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method `stripejsValidationModuleFrontController::initContent()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free