CVE-2023-33280

CVE-2023-33280 is a critical blind SQL injection vulnerability affecting the Store Commander scquickaccounting module for PrestaShop through version 3.7.3. This flaw allows an unauthenticated attacker to execute sensitive SQL queries with a simple HTTP request. With a CVSS score of 9.8 (CRITICAL), it presents a high risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.