CVE-2024-34992: Prestashop Helpdesk

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

SQL Injection vulnerability in the module "Help Desk - Customer Support Management System" (helpdesk) up to version 2.4.0 from FME Modules for PrestaShop allows attackers to obtain sensitive information and cause other impacts via 'Tickets::getsearchedtickets()'

Affected products

• Prestashop Helpdesk: before 2.4.0 (fixed in 2.4.0)

Published 2024-06-24. Last modified 2026-06-17.