CVE

CVE-2023-30194

9.8

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

Prestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstaticfooter::getPosCurrentHook().

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Updated Nov 10, 2026View on NVD →

S4E scanner

criticalWeb Vulnerabilities~10 seconds

Prestashop posstaticfooter <= 1.0.0 - SQL Injection

Prestashop posstaticfooter References: https://friends-of-presta.github.io/security-advisories/modules/2023/05/09/posstaticfooter.html https://themeforest.net/user/posthemes/portfolio https://nvd.nist.gov/vuln/detail/CVE-2023-30194

9 assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →