← Back

Prestatoolkit

prestatoolkit

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Make An Offer/offer Your Price
make_an_offer/offer_your_price
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-25849
1Prestatoolkit
1Make An Offer/offer Your Price
Jun 17, 2026
Mar 8, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In the module "Make an offer" (makeanoffer) <= 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer()` and `MakeOffers::addUserOffer()` .