← Back to browse · API

CVE-2023-50029

Severity
CRITICAL
CVSS
10.0
EPSS
0.00792
Risk score
40.28
CISA KEV
No
PoC
No
Published
2024-06-24
Modified
2024-08-02
First seen
2026-08-08
Aliases
EUVD-2023-54859, GHSA-4PJ4-PM6X-XF9X
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-54859

Description

PHP Injection vulnerability in the module "M4 PDF Extensions" (m4pdf) up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers to run arbitrary code via the M4PDF::saveTemplate() method.

References