← Database

CVE-2022-41403

CRITICAL CVSS: 9.8 Published: 2022-10-12 Modified: 2026-06-17

Description

OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=extension/module/so_newletter_custom_popup/newsletter.

Affected Platforms

Newsletter Subscribe \(Popup \+ Regular Module\) Project Newsletter Subscribe \(Popup \+ Regular Module\)

Weakness Type

CWE-89, CWE-89

References