CVE-2023-40923 Information

Description

MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and save_setting parameters.

Reference

https://security.friendsofpresta.org/modules/2023/11/09/ordersexport.html