← Back

Apollotheme

apollotheme

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Ap Pagebuilder
ap_pagebuilder
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-6648
1Apollotheme
1Ap Pagebuilder
Jun 17, 2026
May 8, 2025
8.7 HIGH· v4
7.5 HIGH· v3
N/A· v2
Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'product_item_path' within the 'config' JSON file, allowing them to read any file...Show more
Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'product_item_path' within the 'config' JSON file, allowing them to read any file on the system.Show less
CVE-2022-44897
1Apollotheme
1Ap Pagebuilder
Jul 9, 2026
Jan 31, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component through 2.4.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the show_number parameter.
CVE-2022-22897
1Apollotheme
1Ap Pagebuilder
Jun 17, 2026
Aug 29, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data.