CVE-2024-28396: Myprestamodules Orders (csv, Excel) Export Pro

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue in MyPrestaModules ordersexport v.6.0.2 and before allows a remote attacker to execute arbitrary code via the download.php component.

Affected products

• Myprestamodules Orders (csv, Excel) Export Pro: up to and including 6.0.2

Published 2024-03-20. Last modified 2026-06-17.