{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-08T07:00:16.649","vulnerabilities":[{"cve":{"id":"CVE-2024-36682","sourceIdentifier":"cve@mitre.org","published":"2024-06-24T22:15:10.377","lastModified":"2026-06-17T07:37:06.520","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In the module \"Theme settings\" (pk_themesettings) <= 1.8.8 from Promokit.eu for PrestaShop, a guest can download all email collected while SHOP is in maintenance mode. Due to a lack of permissions control, a guest can access the txt file which collect email when maintenance is enable which can lead to leak of personal information."},{"lang":"es","value":"En el módulo \"Configuración del tema\" (pk_themesettings) &lt;= 1.8.8 de Promokit.eu para PrestaShop, un invitado puede descargar todos los correos electrónicos recopilados mientras SHOP está en modo de mantenimiento. Debido a la falta de control de permisos, un invitado puede acceder al archivo de texto que recopila el correo electrónico cuando el mantenimiento está habilitado, lo que puede provocar una filtración de información personal."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"prestashopmodules","product":"themesettings","defaultStatus":"unknown","cpes":["cpe:2.3:a:prestashopmodules:themesettings:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"1.8.8","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-15T14:27:22.581599Z","id":"CVE-2024-36682","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-359"}]}],"references":[{"url":"https://security.friendsofpresta.org/modules/2024/06/20/pk_themesettings.html","source":"cve@mitre.org"},{"url":"https://security.friendsofpresta.org/modules/2024/06/20/pk_themesettings.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}