~/products/attribute_wizard_project/attribute_wizard

pipeline liveDigest Docs

Attribute Wizard Project Attribute Wizard vulnerabilities

1 known vulnerability affecting attribute_wizard_project/attribute_wizard.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

1

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2018-10942P1CRITICALCVSS 9.8ExploitedPoCv1.6.92018-05-10

CVE-2018-10942 [CRITICAL] CWE-434 CVE-2018-10942: modules/attributewizardpro/file_upload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0. modules/attributewizardpro/file_upload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to execute arbitrary code by uploading a .phtml file.