https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-50061.htmlhttps://patchthecve.com/cve/CVE-2023-50061.htmlWed, 17 Jun 2026 06:39:07 +0000CRITICAL 9.8: PrestaShop Op'art Easy Redirect >= 1.3.8 and <= 1.3.12 is vulnerable to SQL Injection via Oparteasyredirect::hookActionDispatcher().https://patchthecve.com/cve/CVE-2023-36263.htmlhttps://patchthecve.com/cve/CVE-2023-36263.htmlWed, 17 Jun 2026 06:05:57 +0000CRITICAL 9.8: Prestashop opartlimitquantity 1.4.5 and before is vulnerable to SQL Injection. OpartlimitquantityAlertlimitModuleFrontController::displayAjaxPushAlertMessage()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.https://patchthecve.com/cve/CVE-2023-30148.htmlhttps://patchthecve.com/cve/CVE-2023-30148.htmlWed, 17 Jun 2026 05:54:13 +0000MEDIUM 6.1: Multiple Stored Cross Site Scripting (XSS) vulnerabilities in Opart opartmultihtmlblock before version 2.0.12 and Opart multihtmlblock* version 1.0.0, allows remote authenticated users to inject arbitrary web script or HTML via the body_text or body_text_rude field in /sourcefiles/BlockhtmlClass.phphttps://patchthecve.com/cve/CVE-2023-34576.htmlhttps://patchthecve.com/cve/CVE-2023-34576.htmlWed, 17 Jun 2026 06:03:47 +0000CRITICAL 9.8: SQL injection vulnerability in updatepos.php in PrestaShop opartfaq through 1.0.3 allows remote attackers to run arbitrary SQL commands via unspedified vector.https://patchthecve.com/cve/CVE-2023-34575.htmlhttps://patchthecve.com/cve/CVE-2023-34575.htmlWed, 17 Jun 2026 06:03:47 +0000CRITICAL 9.8: SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to run arbitrary SQL commands via OpartSaveCartDefaultModuleFrontController::initContent() and OpartSaveCartDefaultModuleFrontController::displayAjaxSendCartByEmail() methods.