CVE-2023-6921: Prestashow Google Integrator

Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Blind SQL Injection vulnerability in PrestaShow Google Integrator (PrestaShop addon) allows for data extraction and modification. This attack is possible via command insertion in one of the cookies.

Affected products

• Prestashow Google Integrator: before 2.1.4 (fixed in 2.1.4)

Published 2024-01-08. Last modified 2026-06-17.