CVE-2023-39648: Themevolty Theme Volty CMS Testimonial

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop. In the module “Theme Volty CMS Testimonial” (tvcmstestimonial) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions.

Affected products

• Themevolty Theme Volty CMS Testimonial: up to and including 4.0.1

Published 2023-10-03. Last modified 2026-06-17.