CVE-2024-28388 | SunnyToo stproductcomments Module up to 1.0.5 on PrestaShop getListcomments Privilege Escalation

CVE-2024-28388 | SunnyToo stproductcomments Module up to 1.0.5 on PrestaShop getListcomments Privilege Escalation

A vulnerability has been found in SunnyToo stproductcomments Module up to 1.0.5 on PrestaShop and classified as critical. This vulnerability affects the function StProductCommentClass::getListcomments. The manipulation leads to Privilege Escalation. This vulnerability was named CVE-2024-28388. The attack can be initiated remotely. There is no exploit available.