{ "id": "CVE-2024-28394", "sourceIdentifier": "cve@mitre.org", "published": "2024-03-19T20:15:07.210", "lastModified": "2024-03-20T13:00:16.367", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "An issue in Advanced Plugins reportsstatistics v1.3.20 and before allows a remote attacker to execute arbitrary code via the Sales Reports, Statistics, Custom Fields & Export module." } ], "metrics": {}, "references": [ { "url": "https://addons.prestashop.com/en/customer-administration/28379-sales-reports-statistics-custom-fields-export.html", "source": "cve@mitre.org" }, { "url": "https://security.friendsofpresta.org/modules/2024/03/14/reportsstatistics.html", "source": "cve@mitre.org" } ] }