CVE-2023-45378

CRITICO 9.8CVE-2023-45378 · Published 31/10/2023 · updated 17/06/2026

In breve

CVE-2023-45378 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda prestablog (hdclic).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.60%, superiore al 49.1% delle vulnerabilità.
Correzione: aggiornare a 4.4.8 o successiva.

Package	Affected versions	Patched versions
prestablog hdclic	`< 4.4.8`	`4.4.8`

Description

In the module "PrestaBlog" (prestablog) version 4.4.7 and before from HDclic for PrestaShop, a guest can perform SQL injection. The script ajax slider_positions.php has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection.

References

security.friendsofpresta.org/modules/2023/10/26/prestablog.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free