| |
Vulnerability CVE-2023-30200
Published: 2023-07-20
| Description: |
In the module ??Image: WebP, Compress, Zoom, Lazy load, Alt & More? (ultimateimagetool) in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack. |
References: |
https://security.friendsofpresta.org/modules/2023/07/20/ultimateimagetool.html
https://github.com/PrestaShop/PrestaShop/blob/6c05518b807d014ee8edb811041e3de232520c28/classes/Tools.php#L1247
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
