What’s Vulnerable › Vulnerabilities

CVE-2023-33663

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-16 · updated 2026-06-17
• Weakness: CWE-89

Description

In the module “Customization fields fee for your store” (aicustomfee) from ai-dev module for PrestaShop, an attacker can perform SQL injection up to 0.2.0. Release 0.2.1 fixed this security issue.

Affected products

• Ai-Dev Aicustomfee: before 0.2.1 — fixed in 0.2.1

How to fix

Upgrade to a fixed version: Ai-Dev Aicustomfee 0.2.1. Check the vendor advisory for mitigations.

References

• https://security.friendsofpresta.org/modules/2023/08/16/aicustomfee.html
• https://www.boutique.ai-dev.fr/en/customization/62-customization-fee.html
• https://security.friendsofpresta.org/modules/2023/08/16/aicustomfee.html
• https://www.boutique.ai-dev.fr/en/customization/62-customization-fee.html

Get alerted when CVE-2023-33663 or the next vulnerability affects your stack