CVE-2021-36748: Prestahome Blog

High severity, CVSS 7.5. EPSS: 15.4% chance of exploitation in the next 30 days.

A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simpleblog) module before 1.7.8 for Prestashop allows a remote attacker to extract data from the database via the sb_category parameter.

Affected products

• Prestahome Blog: before 1.7.8 (fixed in 1.7.8)

Published 2021-08-20. Last modified 2026-06-17.