Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A SQL Injection vulnerability in the Advanced Popup Creator (advancedpopupcreator) module for PrestaShop 1.1.26 through 1.2.6 (Fixed in version 1.2.7) allows remote unauthenticated attackers to execute arbitrary SQL queries via the fromController parameter in the popup controller. The parameter is passed unsanitized to SQL queries in classes/AdvancedPopup.php (getPopups() and updateVisits() functions).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
CVE-2025-69633 SQL Injection in PrestaShop Advanced Popup Creator Module 1.1.26-1.2.6 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-69633
Post summary
SQL injection vulnerability disclosed for PrestaShop Advanced Popup Creator module versions 1.1.26-1.2.6; no PoC, exploit, or patch information provided.
CVE-2025-69633 A SQL Injection vulnerability in the Advanced Popup Creator (advancedpopupcreator) module for PrestaShop 1.1.26 through 1.2.6 (Fixed in version 1.2.7) allows remote u… https://www.cve.org/CVERecord?id=CVE-2025-69633
Post summary
The post announces a SQL injection vulnerability in the Advanced Popup Creator module for PrestaShop, fixed in version 1.2.7, without any evidence of PoC, exploitation or false‑positive claims.