CVE-2023-44024: Knowband One Page Checkout, Social Login & Mailchimp

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in KnowBand Module One Page Checkout, Social Login & Mailchimp (supercheckout) v.8.0.3 and before allows a remote attacker to execute arbitrary code via a crafted request to the updateCheckoutBehaviour function in the supercheckout.php component.

Affected products

• Knowband One Page Checkout, Social Login & Mailchimp: up to and including 8.0.3

Published 2023-10-05. Last modified 2026-06-17.