CVE-2023-6921 — AI Deep Analysis Summary

Q: Who is affected? (Versions/Components)

🏢 **Affected Vendor**: PrestaShow. 📦 **Product**: PrestaShop Google Integrator. 📅 **Vulnerable Versions**: All versions **prior to 2.1.4**. If you are running an older version, you are at risk! ⚠️

Q: Is it fixed officially? (Patch/Mitigation)

✅ **Official Fix**: **YES**. The vendor has released a fix. Upgrade the *PrestaShop Google Integrator* module to **version 2.1.4 or later**. This is the primary mitigation strategy. 🔄

Q: Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **CRITICAL**. Due to the **High CVSS score**, **Unauthenticated** access, and **SQL Injection** nature, this requires **immediate attention**. Patch now to prevent data breaches and site compromise. 🏃♂️💨

Updated May 08, 2026 CVSS 9.8 · Critical

This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis →

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: A critical **SQL Injection (SQLi)** flaw in the *PrestaShop Google Integrator* module. 📉 **Consequences**: Attackers can extract sensitive data, modify records, or even take control of the database.…

Read full answer (login)

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-89** (Improper Neutralization of Special Elements used in an SQL Command).…

Read full answer (login)

Q3Who is affected? (Versions/Components)

🏢 **Affected Vendor**: PrestaShow. 📦 **Product**: PrestaShop Google Integrator. 📅 **Vulnerable Versions**: All versions **prior to 2.1.4**. If you are running an older version, you are at risk! ⚠️

Q4What can hackers do? (Privileges/Data)

💀 **Attacker Capabilities**: With this SQLi, hackers can: 1️⃣ **Extract** confidential customer/store data. 2️⃣ **Modify** database records (integrity loss).…

Read full answer (login)

Q5Is exploitation threshold high? (Auth/Config)

🔓 **Exploitation Threshold**: **LOW**. The CVSS vector `AV:N/AC:L/PR:N/UI:N` means: 🌐 Network accessible, 🐢 Low complexity, 🚫 No Privileges required, 👀 No User Interaction needed.…

Read full answer (login)

Q6Is there a public Exp? (PoC/Wild Exploitation)

📢 **Public Exploit Status**: Currently, **No PoC/Exploit** code is listed in the provided data.…

Read full answer (login)

Q7How to self-check? (Features/Scanning)

🔍 **Self-Check Method**: 1️⃣ Check your PrestaShop backend for the *Google Integrator* module version. 2️⃣ If version < 2.1.4, you are vulnerable.…

Read full answer (login)

Q8Is it fixed officially? (Patch/Mitigation)

✅ **Official Fix**: **YES**. The vendor has released a fix. Upgrade the *PrestaShop Google Integrator* module to **version 2.1.4 or later**. This is the primary mitigation strategy. 🔄

Q9What if no patch? (Workaround)

🚧 **No Patch Workaround**: If you cannot update immediately: 1️⃣ **Disable** the module entirely. 2️⃣ Implement a **WAF (Web Application Firewall)** rule to block SQL injection patterns in Cookie headers.…

Read full answer (login)

Q10Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **CRITICAL**. Due to the **High CVSS score**, **Unauthenticated** access, and **SQL Injection** nature, this requires **immediate attention**. Patch now to prevent data breaches and site compromise. 🏃‍♂️💨

Continue exploring

Vulnerability detail Full AI analysis (login) PrestaShow CWE-89