CVE-2023-50027: Buy-Addons Bazoom Magnifier

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

SQL Injection vulnerability in Buy Addons baproductzoommagnifier module for PrestaShop versions 1.0.16 and before, allows remote attackers to escalate privileges and gain sensitive information via BaproductzoommagnifierZoomModuleFrontController::run() method.

Affected products

• Buy-Addons Bazoom Magnifier: up to and including 1.0.16

Published 2024-01-05. Last modified 2026-06-17.