{"id":"CVE-2023-25206","aliases":["EUVD-2023-29169","GHSA-8rh2-rg68-9xj9"],"status":"published","title":"PrestaShop ws_productreviews \u003c 3.6.2 is vulnerable to SQL Injection.","description":"PrestaShop ws_productreviews \u003c 3.6.2 is vulnerable to SQL Injection.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.009,"percentile":0.60097,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2023-03-14T00:00:00Z","modified":"2026-06-17T05:40:54Z","products":[{"vendor":"prestashop","product":"advanced_reviews"}],"references":[{"url":"https://addons.prestashop.com/en/customer-reviews/22373-advanced-reviews-photos-reminder-google-snippets.html","tags":["x_transferred","Product"]},{"url":"https://friends-of-presta.github.io/security-advisories/modules/2023/03/14/ws_productreviews.html","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25206"},{"url":"https://github.com/advisories/GHSA-8rh2-rg68-9xj9"}],"sources":{"cve":[{"id":"CVE-2023-25206","description":"PrestaShop ws_productreviews \u003c 3.6.2 is vulnerable to SQL Injection.","status":"published","published":"2023-03-14T00:00:00Z","modified":"2025-02-27T15:16:23.35Z","updated_at":"2026-11-02T14:35:19.559321Z"}],"euvd":[{"id":"EUVD-2023-29169","description":"PrestaShop ws_productreviews \u003c 3.6.2 is vulnerable to SQL Injection.","status":"published","published":"2023-03-14T00:00:00Z","modified":"2025-02-27T15:16:23Z","cvss":[{"version":"","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"none"}],"updated_at":"2026-11-02T20:53:22.427611Z"}],"ghsa":[{"id":"GHSA-8rh2-rg68-9xj9","title":"PrestaShop ws_productreviews \u003c 3.6.2 is vulnerable to SQL Injection.","description":"PrestaShop ws_productreviews \u003c 3.6.2 is vulnerable to SQL Injection.","status":"published","published":"2023-03-14T18:30:21Z","modified":"2023-03-26T05:06:57Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:54:24.139632Z"}],"nvd":[{"id":"CVE-2023-25206","description":"PrestaShop ws_productreviews \u003c 3.6.2 is vulnerable to SQL Injection.","status":"published","published":"2023-03-14T17:15:19.517Z","modified":"2026-06-17T05:40:54.993Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:07:49.031498Z"}]}}