What’s Vulnerable › Vulnerabilities

CVE-2023-50030

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-01-19 · updated 2026-06-17
• Weakness: CWE-89

Description

In the module "Jms Setting" (jmssetting) from Joommasters for PrestaShop, a guest can perform SQL injection in versions <= 1.1.0. The method `JmsSetting::getSecondImgs()` has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a blind SQL injection.

Affected products

• Joommasters Jmssetting: through 1.1.0

References

• https://security.friendsofpresta.org/modules/2024/01/16/jmssetting.html
• https://www.joommasters.com/
• https://security.friendsofpresta.org/modules/2024/01/16/jmssetting.html
• https://www.joommasters.com/

Get alerted when CVE-2023-50030 or the next vulnerability affects your stack