CVE-2023-39677: Myprestamodules Product Catalog (csv, Excel) Import

High severity, CVSS 7.5. EPSS: 32.3% chance of exploitation in the next 30 days.

MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php.

Affected products

• Myprestamodules Product Catalog (csv, Excel) Import: version 6.2.9 only
• Updateproducts Project Updateproducts: version 3.6.9 only

Published 2023-09-20. Last modified 2026-06-17.