What’s Vulnerable › Vulnerabilities

CVE-2022-22897

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 13.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-08-29 · updated 2026-06-17
• Weakness: CWE-89

Description

A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data.

Affected products

• Apollo Theme AP Page Builder: through 2.4.5

References

• http://packetstormsecurity.com/files/168148/PrestaShop-Ap-Pagebuilder-2.4.4-SQL-Injection.html
• https://friends-of-presta.github.io/security-advisories/modules/2023/01/05/appagebuilder.html
• http://packetstormsecurity.com/files/168148/PrestaShop-Ap-Pagebuilder-2.4.4-SQL-Injection.html
• https://friends-of-presta.github.io/security-advisories/modules/2023/01/05/appagebuilder.html

Get alerted when CVE-2022-22897 or the next vulnerability affects your stack