Vulnerability CVE-2024-34988


Published: 2024-06-24   Modified: 2024-06-25

Description:
SQL injection vulnerability in the module "Complete for Create a Quote in Frontend + Backend Pro" (askforaquotemodul) <= 1.0.51 from Buy Addons for PrestaShop allows attackers to view sensitive information and cause other impacts via methods `AskforaquotemodulcustomernewquoteModuleFrontController::run()`, `AskforaquotemoduladdproductnewquoteModuleFrontController::run()`, `AskforaquotemodulCouponcodeModuleFrontController::run()`, `AskforaquotemodulgetshippingcostModuleFrontController::run()`, `AskforaquotemodulgetstateModuleFrontController::run().`

 References:
https://security.friendsofpresta.org/modules/2024/06/20/askforaquotemodul.html

Copyright 2026, cxsecurity.com

 

Back to Top