CVE-2023-39639

https://notcve.org/view.php?id=CVE-2023-39639

14 Sep 2023 — LeoTheme leoblog up to v3.1.2 was discovered to contain a SQL injection vulnerability via the component LeoBlogBlog::getListBlogs. Se descubrió que LeoTheme leoblog hasta v3.1.2 contiene una vulnerabilidad de inyección SQL a través del componente LeoBlogBlog::getListBlogs • https://addons.prestashop.com/fr/2_community-developer?contributor=190902&id_category=3 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •