| Package | Affected versions | Patched versions |
|---|---|---|
| prestashop/productcomments | ≥ 4.0.0, < 4.2.1 | 4.2.1 |
| productcomments | < 4.2.1 | 4.2.1 |
An attacker can use a Blind SQL injection to retrieve data or stop the MySQL service.
The problem is fixed in 4.2.1
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free