← Back

Common Services

common-services

5 CVEs • 4 products

Products (4)

Click to collapse
Toggle
So Flexibilite
so_flexibilite
2 CVEs
Sonice Etiquetage
sonice_etiquetage
1 CVE
Sonice Retour
sonice_retour
1 CVE
Soliberte
soliberte
1 CVE

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-25844
1Common Services
1So Flexibilite
Jun 17, 2026
Mar 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue was discovered in Common-Services "So Flexibilite" (soflexibilite) module for PrestaShop before version 4.1.26, allows remote attackers to escalate privileges and obtain sensitive information via debug file.
CVE-2024-25841
1Common Services
1So Flexibilite
Jun 17, 2026
Feb 27, 2024
N/A· v4
5.9 MEDIUM· v3
N/A· v2
In the module "So Flexibilite" (soflexibilite) from Common-Services for PrestaShop < 4.1.26, a guest (authenticated customer) can perform Cross Site Scripting (XSS) injection.
CVE-2023-40921
1Common Services
1Soliberte
Jun 17, 2026
Dec 14, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
SQL Injection vulnerability in functions/point_list.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive information via the lat and lng parameters.
CVE-2023-45382
1Common Services
1Sonice Retour
Jun 17, 2026
Nov 17, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
In the module "SoNice Retour" (sonice_retour) up to version 2.1.0 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of...Show more
In the module "SoNice Retour" (sonice_retour) up to version 2.1.0 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction, a guest can perform a path traversal to view all files on the information system.Show less
CVE-2023-45383
1Common Services
1Sonice Etiquetage
Jun 17, 2026
Oct 18, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
In the module "SoNice etiquetage" (sonice_etiquetage) up to version 2.5.9 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a...Show more
In the module "SoNice etiquetage" (sonice_etiquetage) up to version 2.5.9 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction, a guest can perform a path traversal to view all files on the information system.Show less