CVE-2022-44727

The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ).

CVSS v3.1 NVD

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

2.67% chance of exploitation in the next 30 days, 86th percentile

Nuclei

critical · CWE-89

Published

2022-11-10

Updated

2025-05-01

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44727.yaml

Security advisories

• https://www.lineagrafica.es/modp/lgcookieslaw/en/readme_en.pdf
• https://addons.prestashop.com/en/legal/8734-eu-cookie-law-gdpr-banner-blocker.html
• https://securityandstuff.com/posts/cve-2022-44727

References

• CVE Record
• NVD entry