Code injection

2024-01-1621:15:00

PRIOn knowledge base

www.prio-n.com

code injection

202 ecommerce

loyalty program

prestashop

unauthenticated attackers

order status

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.7%

JSON

An issue in 202 ecommerce Advanced Loyalty Program: Loyalty Points before v2.3.4 for PrestaShop allows unauthenticated attackers to arbitrarily change an order status.

CPENameOperatorVersion
advanced_loyalty_programlt2.3.4

CPE	Name	Operator	Version
	advanced_loyalty_program	lt	2.3.4

References

github.com/202ecommerce/security-advisories/security/advisories/GHSA-jp2c-mj65-qpmw