← Back

Simpleimportproduct

simpleimportproduct

Vendor: Simpleimportproduct Project • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-25846
2Myprestamodules
Simpleimportproduct Project
2Product Catalog (csv, Excel) Import
Simpleimportproduct
Jun 17, 2026
Feb 27, 2024
N/A· v4
9.1 CRITICAL· v3
N/A· v2
In the module "Product Catalog (CSV, Excel) Import" (simpleimportproduct) <= 6.7.0 from MyPrestaModules for PrestaShop, a guest can upload files with extensions .php.
CVE-2023-39675
2Myprestamodules
Simpleimportproduct Project
2Product Catalog (csv, Excel) Import
Simpleimportproduct
Jun 17, 2026
Sep 20, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
SimpleImportProduct Prestashop Module v6.2.9 was discovered to contain a SQL injection vulnerability via the key parameter at send.php.
CVE-2023-39677
3Myprestamodules
Simpleimportproduct ProjectUpdateproducts Project
3Product Catalog (csv, Excel) Import
SimpleimportproductUpdateproducts
Jun 17, 2026
Sep 20, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php.