← Back

Kerawen

kerawen

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Omnichannel Stocks
omnichannel_stocks
1 CVE
Kerawen
kerawen
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-40922
1Kerawen
1Kerawen
Jun 17, 2026
Nov 4, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocs_id_cart parameter at KerawenDeliveryModuleFrontController::initContent().
CVE-2023-27845
1Kerawen
1Omnichannel Stocks
Jun 17, 2026
Jul 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
SQL injection vulnerability found in PrestaShop lekerawen_ocs before v.1.4.1 allow a remote attacker to gain privileges via the KerawenHelper::setCartOperationInfo, and KerawenHelper::resetCheckoutSessionData components.