CVE-2022-22897: Apollotheme Ap Pagebuilder

Critical severity, CVSS 9.8. EPSS: 14.4% chance of exploitation in the next 30 days.

A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data.

Affected products

• Apollotheme Ap Pagebuilder: up to and including 2.4.5

Published 2022-08-29. Last modified 2026-06-17.