漏洞描述
The module Jms Blog (jmsblog) from Joommasters contains a Blind SQL injection vulnerability. This module is for the PrestaShop e-commerce platform and mainly provided with joommasters PrestaShop themes
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
cve.mitre.orghttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27034↗security.friendsofpresta.orghttps://security.friendsofpresta.org/modules/2023/03/13/jmsblog.html↗github.comhttps://github.com/advisories/GHSA-7jr7-v6gv-m656↗friends-of-presta.github.iohttps://friends-of-presta.github.io/security-advisories/modules/2023/03/13/jmsblog.html↗