Vulnerability CVE-2024-34989


Published: 2024-06-21   Modified: 2024-06-22

Description:
In the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop, a guest can perform SQL injection via `PrestaPDFProductListModuleFrontController::queryDb().'

 References:
https://security.friendsofpresta.org/modules/2024/06/20/prestapdf.html

Copyright 2026, cxsecurity.com

 

Back to Top