Blind SQLi in PrestaShop Stripejs Module <=4.5.5
CVE-2023-23315 Published on March 1, 2023
The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method `stripejsValidationModuleFrontController::initContent()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
Products Associated with CVE-2023-23315
stack.watch emails you whenever new vulnerabilities are published in Stripe Payment Pro or PrestaShop. Just hit a watch button to start following.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.