← Back

Blog

blog

Vendor: Prestahome • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Prestahome
1Blog
Jun 17, 2026
Aug 20, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simpleblog) module before 1.7.8 for Prestashop allows a remote attacker to extract data from the database via the sb_category parameter.