CVE-2023-48926

2024-01-1600:00:00

mitre

www.cve.org

202 ecommerce

loyalty program

prestashop

unauthenticated attackers

order status

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

JSON

An issue in 202 ecommerce Advanced Loyalty Program: Loyalty Points before v2.3.4 for PrestaShop allows unauthenticated attackers to arbitrarily change an order status.

References

github.com/202ecommerce/security-advisories/security/advisories/GHSA-jp2c-mj65-qpmw