What is CVE-2023-39649?

CVE-2023-39649 is a critical-severity vulnerability in Themevolty Theme Volty Cms Category Slider, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-10-03.

How severe is CVE-2023-39649?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Themevolty Theme Volty Cms Category Slider

CVE-2023-39649

Improper neutralization of SQL parameter in Theme Volty CMS Category Slider module for PrestaShop. In the module “Theme Volty CMS Category Slider” (tvcmscategoryslider) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions.

Vulnerability class: SQL Injection

EPSS: 0.005 (42.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Themevolty Theme_volty_cms_category_slider
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Patch, Third Party Advisory)

Frequently asked questions

What is CVE-2023-39649?: CVE-2023-39649 is a critical-severity vulnerability in Themevolty Theme Volty Cms Category Slider, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-10-03.
How severe is CVE-2023-39649?: Critical severity. CVSS v3 base score is 9.8 out of 10.