CVE Catalog
CVE-2023-33663
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.52%
40th percentile - higher than 40% of all known CVEs
Summary
The 'Customization fields fee for your store' (aicustomfee) module in the ai-dev module for PrestaShop is vulnerable to SQL injection up to version 0.2.0. Version 0.2.1 has fixed this security issue.
Risk Assessment
An attacker can exploit this vulnerability to gain unauthorized access to the database, potentially leading to data theft or data manipulation.
Recommendation
It is recommended to update the aicustomfee module to version 0.2.1 or later to secure the system against this threat.
Original NVD description (English source)
In the module “Customization fields fee for your store” (aicustomfee) from ai-dev module for PrestaShop, an attacker can perform SQL injection up to 0.2.0. Release 0.2.1 fixed this security issue.