CVE-2023-26861

CVE-2023-26861 is a critical SQL injection vulnerability affecting PrestaShop vivawallet module versions 1.7.10 and earlier. This flaw allows a remote, unauthenticated attacker to gain elevated privileges by injecting malicious SQL queries. With a CVSS score of 9.8, the vulnerability poses a severe risk, enabling full compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in common repositories like Metasploit or ExploitDB, the vulnerability has garnered some community discussion, indicating awareness.