CVE-2021-43789

Published December 7th, 2021

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection using search filters with `orderBy` and `sortOrder` parameters. The problem is fixed in version 1.7.8.2.

PrestaShop/PrestaShop

PrestaShop is the universal open-source software platform to build your e-commerce solution.

GitHub

9.1K