What is CVE-2023-39646?

CVE-2023-39646 is a critical-severity vulnerability in Themevolty Theme Volty Cms Category Chain Slider, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-10-03.

How severe is CVE-2023-39646?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Themevolty Theme Volty Cms Category Chain Slider

CVE-2023-39646

Improper neutralization of SQL parameter in Theme Volty CMS Category Chain Slider module for PrestaShop. In the module “Theme Volty CMS Category Chain Slide"(tvcmscategorychainslider) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions.

Vulnerability class: SQL Injection

EPSS: 0.005 (42.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Themevolty Theme_volty_cms_category_chain_slider
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Patch, Third Party Advisory)

Frequently asked questions

What is CVE-2023-39646?: CVE-2023-39646 is a critical-severity vulnerability in Themevolty Theme Volty Cms Category Chain Slider, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-10-03.
How severe is CVE-2023-39646?: Critical severity. CVSS v3 base score is 9.8 out of 10.