2 matches found
GHSA-8XX5-H6M3-JR33 Presta Shop vulnerable to email enumeration
Impact An unauthenticated attacker with access to the back-office URL can manipulate the idemployee and resettoken parameters to enumerate valid back-office employee email addresses. Impacted parties: Store administrators and employees: their email addresses are exposed. Merchants: risk of...
4.2CVSS7AI score0.00816EPSS
SaveExploits1References9
20