CVE-2022-44727

CRITICAL 9.1EPSS 2.5%

The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ).

CVSS v3.1: 9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v3.1: 9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS: 2.49% chance of exploitation in the next 30 days, 83th percentile
Nuclei: critical · CWE-89
Published: 2022-11-10
Updated: 2025-05-01

Nuclei templates (1)

projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44727.yaml

References

Related