What’s Vulnerable › Vulnerabilities

CVE-2024-25848

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-08 · updated 2026-06-17
• Weakness: CWE-89

Description

In the module "Ever Ultimate SEO" (everpsseo) <= 8.1.2 from Team Ever for PrestaShop, a guest can perform SQL injection in affected versions.

Affected products

• Team-Ever Seo: through 8.1.2

References

• https://addons.prestashop.com/fr/seo-referencement-naturel/39489-ever-ultimate-seo.html
• https://security.friendsofpresta.org/modules/2024/03/05/everpsseo.html
• https://www.team-ever.com/prestashop-ever-ultimate-seo/
• https://addons.prestashop.com/fr/seo-referencement-naturel/39489-ever-ultimate-seo.html
• https://security.friendsofpresta.org/modules/2024/03/05/everpsseo.html
• https://www.team-ever.com/prestashop-ever-ultimate-seo/

Get alerted when CVE-2024-25848 or the next vulnerability affects your stack