CVE-2023-46356 (published 2023-10-31T00:00:00)
In the module "CSV Feeds PRO" (csvfeeds) before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection. The method `SearchApiCsv::getProducts()` has sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a