What’s Vulnerable › Vulnerabilities

CVE-2023-45384

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-19 · updated 2026-06-17
• Weakness: CWE-434

Description

KnowBand supercheckout > 5.0.7 and < 6.0.7 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the module "Module One Page Checkout, Social Login & Mailchimp" (supercheckout), a guest can upload files with extensions .php

Affected products

• Knowband Supercheckout: from 5.0.7 before 6.0.7 — fixed in 6.0.7

How to fix

Upgrade to a fixed version: Knowband Supercheckout 6.0.7. Check the vendor advisory for mitigations.

References

• https://addons.prestashop.com/fr/processus-rapide-commande/18016-one-page-checkout-social-login-mailchimp.html
• https://security.friendsofpresta.org/modules/2023/10/17/supercheckout.html
• https://addons.prestashop.com/fr/processus-rapide-commande/18016-one-page-checkout-social-login-mailchimp.html
• https://security.friendsofpresta.org/modules/2023/10/17/supercheckout.html

Get alerted when CVE-2023-45384 or the next vulnerability affects your stack