{"action":"Upgrade prestashop/prestashop to 1.7.8.7 or later.","affected":[{"fixed":"1.7.8.7","introduced":"1.6.0.10"}],"component":"prestashop/prestashop","cve_ids":["CVE-2022-31181"],"ecosystem":"Packagist","epss":0.07651,"exploited":false,"fixed_versions":["1.7.8.7"],"ghsa_id":"GHSA-hrgx-p36p-89q4","id":"tcs_01M5KF3XD90DDJ87YZA28A6VYH","modified_at":"2023-11-08T04:09:29.075917Z","published_at":"2022-07-29T22:27:27Z","references":["https://osv.dev/vulnerability/GHSA-hrgx-p36p-89q4","https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-hrgx-p36p-89q4","https://nvd.nist.gov/vuln/detail/CVE-2022-31181","https://github.com/PrestaShop/PrestaShop/commit/b6d96e7c2a4e35a44e96ffbcdfd34439b56af804","https://github.com/PrestaShop/PrestaShop","https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.8.7"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-hrgx-p36p-89q4","url":"https://osv.dev/vulnerability/GHSA-hrgx-p36p-89q4"}],"summary":"PrestaShop eval injection possible if shop vulnerable to SQL injection"}