What is CVE-2023-39651?

CVE-2023-39651 is a critical-severity vulnerability in Themevolty Theme Volty Cms Brandlist, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-10-03.

How severe is CVE-2023-39651?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Themevolty Theme Volty Cms Brandlist

CVE-2023-39651

Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop In the module “Theme Volty CMS BrandList” (tvcmsbrandlist) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions.

Vulnerability class: SQL Injection

EPSS: 0.005 (42.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Themevolty Theme_volty_cms_brandlist
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Patch, Third Party Advisory)

Frequently asked questions

What is CVE-2023-39651?: CVE-2023-39651 is a critical-severity vulnerability in Themevolty Theme Volty Cms Brandlist, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-10-03.
How severe is CVE-2023-39651?: Critical severity. CVSS v3 base score is 9.8 out of 10.