Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8
CVE-2024-28390
- EPSS 0.42%
- Published 14.03.2024 04:15:09
- Last modified 10.06.2025 16:45:39
An issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01, allows a remote attacker to escalate privileges and obtain sensitive information via Improper Access Control.
7.5
CVE-2023-30200
- EPSS 0.1%
- Published 20.07.2023 20:15:10
- Last modified 21.11.2024 07:59:53
In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” (ultimateimagetool) in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack...
1