CVE-2020-12120

The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can be used to modify orders via SOAP. Attackers can also retrieve information about orders or buyers...

CVE-2020-12120

CVE-2020-12120 affects the Correos Express addon for PrestaShop 1.6–1.7. A remote attacker can trigger information disclosure, including a service owner's password used to modify orders via SOAP, and can also retrieve detailed data on orders or buyers. The linked Red Hat, CNVD, and CVE records co...