Vendor/product archive

prestashop / m4_pdf CVEs

Beta · best-effort

2 CVEs tagged to prestashop / m4_pdf — 0 Critical, 0 High, 1 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to prestashop vendor archive

CVE-2022-45448

Published Sep 20, 2023

M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to an arbitrary HTML Document crafting vulnerability. The resource /m4pdf/pdf.php uses templates…

CVSS 3.5 · Low

Vendor/product tagsBeta · best-effort

CVE-2022-45447

Published Sep 20, 2023

M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to a directory traversal vulnerability. The “f” parameter is not properly checked in the resourc…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1