3 matches found
Code injection
An issue in 202 ecommerce Advanced Loyalty Program: Loyalty Points before v2.3.4 for PrestaShop allows unauthenticated attackers to arbitrarily change an order status...
5CVSS7.3AI score0.00346EPSS
SaveExploits0References1Affected Software1
CVE-2023-48926
CVE-2023-48926 affects the PrestaShop extension: 202 ecommerce Advanced Loyalty Program, Loyalty Points before v2.3.4. The vulnerability allows unauthenticated attackers to arbitrarily change an order status. Documents cite a CVSS v3.1 base score of 5.3 (Medium) with impact limited to integrity. ...
5.3CVSS5.4AI score0.00346EPSS
SaveExploits0References1Affected Software1
20