4 matches found
Code injection
An issue in 202 ecommerce Advanced Loyalty Program: Loyalty Points before v2.3.4 for PrestaShop allows unauthenticated attackers to arbitrarily change an order status...
PT-2024-13662
Name of the Vulnerable Software and Affected Versions 202 ecommerce Advanced Loyalty Program: Loyalty Points versions prior to 2.3.4 for PrestaShop Description The issue allows unauthenticated attackers to arbitrarily change an order status. Recommendations For versions prior to 2.3.4, update to...
CVE-2023-48926
CVE-2023-48926 affects the PrestaShop extension: 202 ecommerce Advanced Loyalty Program, Loyalty Points before v2.3.4. The vulnerability allows unauthenticated attackers to arbitrarily change an order status. Documents cite a CVSS v3.1 base score of 5.3 (Medium) with impact limited to integrity. ...
