CVE-2023-27032

Description

Prestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a SQL injection vulnerability via the component AdvancedPopup::getPopups().

References

• https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-30821
• https://addons.prestashop.com/en/pop-up/23773-popup-on-entry-exit-popup-add-product-and-newsletter.html
• https://friends-of-presta.github.io/security-advisories/modules/2023/04/11/advancedpopupcreator.html