← Back

Webbax

webbax

7 CVEs • 7 products

Products (7)

Click to collapse
Toggle
Customexporter
customexporter
Salesbooster
salesbooster
Myinventory
myinventory
King Avis
king-avis
Winbizpayment
winbizpayment
Postfinance
postfinance

CVEs (7)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Webbax
1Super Newsletter
Jun 17, 2026
Mar 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue was discovered in Webbax "Super Newsletter" (supernewsletter) module for PrestaShop versions 1.4.21 and before, allows local attackers to escalate privileges and obtain sensitive information.
1Webbax
1Postfinance
Jun 17, 2026
Jun 14, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
PrestaShop postfinance <= 17.1.13 is vulnerable to SQL Injection via PostfinanceValidationModuleFrontController::postProcess().
1Webbax
1Winbizpayment
Jun 17, 2026
Jun 12, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Prestashop winbizpayment <= 1.0.2 is vulnerable to Incorrect Access Control via modules/winbizpayment/downloads/download.php.
1Webbax
1King Avis
Jun 17, 2026
Jun 2, 2023
N/A· v4
4.9 MEDIUM· v3
N/A· v2
Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: bef...Show more
Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15. Show less
1Webbax
1Myinventory
Jun 17, 2026
May 31, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Incorrect Access Control in the module "My inventory" (myinventory) <= 1.6.6 from Webbax for PrestaShop, allows a guest to download personal information without restriction by performing a path traversal attack.
1Webbax
1Salesbooster
Jun 17, 2026
May 30, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Prestashop salesbooster <= 1.10.4 is vulnerable to Incorrect Access Control via modules/salesbooster/downloads/download.php.
1Webbax
1Customexporter
Jun 17, 2026
May 19, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Prestashop customexporter <= 1.7.20 is vulnerable to Incorrect Access Control via modules/customexporter/downloads/download.php.