CVE-2024-25848

MEDIUM

Ever Ultimate SEO <= 8.1.2 - Unauthenticated SQL Injection

Title source: llm

In the module "Ever Ultimate SEO" (everpsseo) <= 8.1.2 from Team Ever for PrestaShop, a guest can perform SQL injection in affected versions.

Core 3

Core References

Product

Third Party Advisory

Product

CVSS v3 5.9

EPSS 0.0042

EPSS Percentile 33.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-89

Status published

Products (1)

team-ever/seo < 8.1.2

Published Mar 08, 2024

Tracked Since Feb 18, 2026