Common Services

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Common Services product.

RSS Feeds for Common Services security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Common Services products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Common Services Sorted by Most Security Vulnerabilities since 2018

Common Services So Flexibilite2 vulnerabilities

Common Services Soliberte1 vulnerability

Common Services Sonice Etiquetage1 vulnerability

Common Services Sonice Retour1 vulnerability

By the Year

In 2026 there have been 0 vulnerabilities in Common Services. Common Services did not have any published security vulnerabilities last year.

Year	Vulnerabilities	Average Score
2026	0	0.00
2025	0	0.00
2024	2	0.00
2023	3	8.27

It may take a day or so for new Common Services vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Common Services Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2024-25844	Mar 03, 2024	PrestaShop <=4.1.26 soflexibilite Module Priv Esc via Debug File An issue was discovered in Common-Services "So Flexibilite" (soflexibilite) module for PrestaShop before version 4.1.26, allows remote attackers to escalate privileges and obtain sensitive information via debug file.	So Flexibilite
CVE-2024-25841	Feb 27, 2024	PrestaShop <4.1.26 XSS via So Flexibilite (soflexibilite) module In the module "So Flexibilite" (soflexibilite) from Common-Services for PrestaShop < 4.1.26, a guest (authenticated customer) can perform Cross Site Scripting (XSS) injection.	So Flexibilite
CVE-2023-40921	Dec 14, 2023	SQLi in soliberte functions/point_list.php before v4.3.03 via lat/lng SQL Injection vulnerability in functions/point_list.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive information via the lat and lng parameters.	Soliberte
CVE-2023-45382	Nov 17, 2023	SoNice Retour PrestaShop Module 2.1.0: Path Traversal Allows Guest Download In the module "SoNice Retour" (sonice_retour) up to version 2.1.0 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction, a guest can perform a path traversal to view all files on the information system.	Sonice Retour
CVE-2023-45383	Oct 18, 2023	Path Traversal in SoNice Etiquetage <=2.5.9 allowing Guest Arbitrary File Access In the module "SoNice etiquetage" (sonice_etiquetage) up to version 2.5.9 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction, a guest can perform a path traversal to view all files on the information system.	Sonice Etiquetage