What is CVE-2023-39647?

CVE-2023-39647 is a critical-severity vulnerability in Themevolty Theme Volty Cms Category Product, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-10-03.

How severe is CVE-2023-39647?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Themevolty Theme Volty Cms Category Product

CVE-2023-39647

Improper neutralization of SQL parameter in Theme Volty CMS Category Product module for PrestaShop. In the module “Theme Volty CMS Category Product” (tvcmscategoryproduct) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions.

Vulnerability class: SQL Injection

EPSS: 0.005 (42.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Themevolty Theme_volty_cms_category_product
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Patch, Third Party Advisory)

Frequently asked questions

What is CVE-2023-39647?: CVE-2023-39647 is a critical-severity vulnerability in Themevolty Theme Volty Cms Category Product, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-10-03.
How severe is CVE-2023-39647?: Critical severity. CVSS v3 base score is 9.8 out of 10.