CVE-2023-33493

9.8 criticalEPSS 0.9%

Critical (9.8) in ajaxmanager project ajaxmanager. EPSS 0.9% chance of exploitation in the next 30 days.

An Unrestricted Upload of File with Dangerous Type vulnerability in the Ajaxmanager File and Database explorer (ajaxmanager) module for PrestaShop through 2.3.0, allows remote attackers to upload dangerous files without restrictions.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2023-08-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ajaxmanager_project:ajaxmanager

References

https://security.friendsofpresta.org/module/2023/07/28/ajaxmanager.html
https://security.friendsofpresta.org/module/2023/07/28/ajaxmanager.html

Check your stack JSON