GHSA-2jx3-5j9v-prpp
BlockWishList SQL Injection vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | prestashop/blockwishlist | >= 2.0.0, < 2.1.1 | 2.1.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
An authenticated customer can perform SQL injection
### Patches
Issue is fixed in 2.1.1
References
External links from the advisory. They lead to third-party sites.
- https://github.com/PrestaShop/blockwishlist/security/advisories/GHSA-2jx3-5j9v-prpp
- https://nvd.nist.gov/vuln/detail/CVE-2022-31101
- https://github.com/PrestaShop/blockwishlist/commit/b3ec4b85af5fd73f74d55390b226d221298ca084
- https://github.com/PrestaShop/blockwishlist
- http://packetstormsecurity.com/files/168003/Prestashop-Blockwishlist-2.1.0-SQL-Injection.html