← Back

So Flexibilite

so_flexibilite

Vendor: Common Services • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-25844
1Common Services
1So Flexibilite
Jun 17, 2026
Mar 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue was discovered in Common-Services "So Flexibilite" (soflexibilite) module for PrestaShop before version 4.1.26, allows remote attackers to escalate privileges and obtain sensitive information via debug file.
CVE-2024-25841
1Common Services
1So Flexibilite
Jun 17, 2026
Feb 27, 2024
N/A· v4
5.9 MEDIUM· v3
N/A· v2
In the module "So Flexibilite" (soflexibilite) from Common-Services for PrestaShop < 4.1.26, a guest (authenticated customer) can perform Cross Site Scripting (XSS) injection.