{"id":"CVE-2022-44727","aliases":["EUVD-2022-47661","GHSA-ggxh-673w-p257"],"status":"published","title":"The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection...","description":"The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ).","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03205,"percentile":0.88244,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2022-11-10T00:00:00Z","modified":"2026-06-17T05:08:50Z","exploits":[{"source":"nuclei","id":"CVE-2022-44727","title":"PrestaShop lgcookieslaw - SQL Injection","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44727.yaml"}],"products":[{"vendor":"lineagrafica","product":"eu_cookie_law_gdpr"}],"references":[{"url":"https://www.lineagrafica.es/modp/lgcookieslaw/en/readme_en.pdf","tags":["x_transferred","Product","Vendor Advisory"]},{"url":"https://addons.prestashop.com/en/legal/8734-eu-cookie-law-gdpr-banner-blocker.html","tags":["x_transferred","Product","Third Party Advisory"]},{"url":"https://securityandstuff.com/posts/cve-2022-44727/","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-44727"},{"url":"https://securityandstuff.com/posts/cve-2022-44727"},{"url":"https://github.com/advisories/GHSA-ggxh-673w-p257"}],"sources":{"cve":[{"id":"CVE-2022-44727","description":"The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ).","status":"published","published":"2022-11-10T00:00:00Z","modified":"2025-05-01T14:01:49.423Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"adp"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:34:30.493103Z"}],"euvd":[{"id":"EUVD-2022-47661","description":"The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ).","status":"published","published":"2022-11-10T00:00:00Z","modified":"2025-05-01T14:01:49Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T20:51:57.509565Z"}],"ghsa":[{"id":"GHSA-ggxh-673w-p257","title":"The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection...","description":"The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ).","status":"published","published":"2022-11-10T19:01:06Z","modified":"2025-05-01T15:32:36Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:02:05.821687Z"}],"nvd":[{"id":"CVE-2022-44727","description":"The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ).","status":"published","published":"2022-11-10T17:15:10.687Z","modified":"2026-06-17T05:08:50.243Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:07:31.914793Z"}]}}