CVE-2023-29630 - PrestaShop jmsmegamenu 1.1.x and 2.0.x is vulnerable to SQL Injection via ajax_jmsmegamenu.php

CRITICAL

PrestaShop jmsmegamenu 1.1.x and 2.0.x is vulnerable to SQL Injection via ajax_jmsmegamenu.php

Published Jun 5, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 1.03%

PrestaShop jmsmegamenu 1.1.x and 2.0.x is vulnerable to SQL Injection via ajax_jmsmegamenu.php.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-33171		Advisory
https://friends-of-presta.github.io/security-advisories/modules/2023/03/13/jmsvermegamenu.html		Third Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 5, 2023

Updated Jan 31, 2025

Reserved Apr 7, 2023

CISA Vulnrichment

Updated Jan 8, 2025

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jun 5, 2023

Updated Jan 31, 2025

GitHub

No data