| Package | Affected versions | Patched versions |
|---|---|---|
| prestashop | ≥ 1.5.5.0, ≤ 1.7.2.5 | |
| responsive mega menu pro | = 1.0.32 |
modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute arbitrary PHP code via the code parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free