CVE-2023-33278

CVE-2023-33278 is a critical blind SQL injection vulnerability affecting the Store Commander scexportcustomers module in PrestaShop versions through 3.6.1. This flaw allows unauthenticated attackers to execute sensitive SQL calls via a simple HTTP request. With a CVSS score of 9.8 (Critical), the vulnerability has a network attack vector, low attack complexity, and can lead to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with over 10 mentions.