{"cvss":9.8,"datePublished":"2026-02-15T00:00:00Z","dateUpdated":"2026-02-15T00:00:00Z","description":"Prestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a SQL injection vulnerability via the component AdvancedPopup::getPopups().","dueDate":"","id":"CVE-2023-27032","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"popup_module_\\(on_entering\\,_exit_popup\\,_add_product\\)_and_newsletter","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"idnovate popup_module_\\(on_entering\\,_exit_popup\\,_add_product\\)_and_newsletter Improper Neutralization of Special Elements used in an SQL Command","vendor":"idnovate"}