PatchTheCVE: storecommanderhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-33280: In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls canhttps://patchthecve.com/cve/CVE-2023-33280.htmlhttps://patchthecve.com/cve/CVE-2023-33280.htmlWed, 17 Jun 2026 06:01:28 +0000CRITICAL 9.8: In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection.CVE-2023-33278: In the Store Commander scexportcustomers module for PrestaShop through 3.6.1, sensitive SQL calls can be execuhttps://patchthecve.com/cve/CVE-2023-33278.htmlhttps://patchthecve.com/cve/CVE-2023-33278.htmlWed, 17 Jun 2026 06:01:27 +0000CRITICAL 9.8: In the Store Commander scexportcustomers module for PrestaShop through 3.6.1, sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection.CVE-2023-30281: Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccountinghttps://patchthecve.com/cve/CVE-2023-30281.htmlhttps://patchthecve.com/cve/CVE-2023-30281.htmlWed, 17 Jun 2026 05:54:25 +0000MEDIUM 6.5: Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store Commander for PrestaShop, a guest can access exports from the module which can lead to leak of personnal informations from ps_customer table sush as name / surname