CVE-2023-41507

Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.99% chance of exploitation in the next 30 days, 62nd percentile

Published

2023-09-05

Updated

2024-09-30

Proof-of-concept exploits (1)

• redblueteam/CVE-2023-41507/0★ · 2023-09-07

Security advisories

• redblueteam/CVE-2023-41507
• https://superstorefinder.net/support/forums/topic/super-store-finder-patch-notes

References

• CVE Record
• NVD entry

Related

• CVE-2023-41508