CVE-2023-6921

CRITICO 9.1CVE-2023-6921 · Published 08/01/2024 · updated 17/06/2026

In breve

CVE-2023-6921 è una vulnerabilità CRITICO (CVSS 9.1) che riguarda google integrator (prestashow).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.69%, superiore al 53.2% delle vulnerabilità.
Correzione: aggiornare a 2.1.4 o successiva.

Package	Affected versions	Patched versions
google integrator prestashow	`< 2.1.4`	`2.1.4`

Description

Blind SQL Injection vulnerability in PrestaShow Google Integrator (PrestaShop addon) allows for data extraction and modification. This attack is possible via command insertion in one of the cookies.

References

cert.pl/en/posts/2024/01/CVE-2023-6921 · Third Party Advisory
cert.pl/posts/2024/01/CVE-2023-6921 · Third Party Advisory
prestashow.pl/pl/moduly-prestashop/28-prestashop-google-integrator-ga4-gtm-ads-remarketing.html · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free