CVE-2023-39652 - theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVideoTabConfirmDeleteModuleFrontController::run()

Back Back to CVE browser

CRITICAL

theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVideoTabConfirmDeleteModuleFrontController::run()

Published Aug 28, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.62%

Description

theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVideoTabConfirmDeleteModuleFrontController::run().

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-43359
Advisory
https://security.friendsofpresta.org/modules/2023/08/24/tvcmsvideotab.html
PatchThird Party Advisory
https://themevolty.com/
Product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-43359		Advisory
https://security.friendsofpresta.org/modules/2023/08/24/tvcmsvideotab.html		PatchThird Party Advisory
https://themevolty.com/		Product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 28, 2023

Updated Oct 2, 2024

Reserved Aug 7, 2023

Link CVE-2023-39652

CISA Vulnrichment

Updated Oct 2, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-39652

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 28, 2023

Updated Oct 2, 2024

Link EUVD-2023-43359

GitHub

No data