Critical Vulnerability in PrestaShop SQL Manager

PrestaShop has released security updates to address a critical vulnerability (CVE-2023-30839) affecting PrestaShop SQL Manager. The vulnerability has a Common Vulnerability Scoring System (CVSSv3) score of 9.9 out of 10.

Successful exploitation of the vulnerability could allow an attacker with a user account to perform unauthorised modifications, which include writing, updating or deleting SQL databases.

The vulnerability affects PrestaShop versions 8.0.3 and earlier.

Users and administrators of affected product versions are advised to update to the latest versions immediately.

More information is available here:

https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-p379-cxqh-q822

https://www.bleepingcomputer.com/news/security/prestashop-fixes-bug-that-lets-any-backend-user-delete-databases/