CVE-2023-45379

CriticalCVSS 9.8

Published: 19/10/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

39th percentile - higher than 39% of all known CVEs

Summary

In the "Rotator Img" module (posrotatorimg) for PrestaShop in versions at least up to 1.1 from PosThemes, an unauthenticated user can perform an SQL injection attack.

Risk Assessment

An attacker can extract or modify data in the PrestaShop database, potentially leading to customer data leakage, admin account takeover, or full compromise of the store.

Recommendation

Immediately update the "Rotator Img" module to the latest available version or apply a security patch to prevent SQL injection.

Original NVD description (English source)

In the module "Rotator Img" (posrotatorimg) in versions at least up to 1.1 from PosThemes for PrestaShop, a guest can perform SQL injection.