CVE-2023-50029

Severity: critical (CVSS 10.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-06-24 · updated 2026-06-17
Weakness: CWE-94

Description

PHP Injection vulnerability in the module "M4 PDF Extensions" (m4pdf) up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers to run arbitrary code via the M4PDF::saveTemplate() method.

Affected products

Prestashop M4 PDF plugin: through 3.3.1

References

https://security.friendsofpresta.org/modules/2024/06/20/m4pdf.html
https://security.friendsofpresta.org/modules/2024/06/20/m4pdf.html

Get alerted when CVE-2023-50029 or the next vulnerability affects your stack