CVE-2021-21308

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout system is not complete and an attacker is able to foreign request and executes customer commands. The problem is fixed in 1.7.7.2...

CVE-2021-21308

CVE-2021-21308 affects PrestaShop prior to 1.7.2, where the soft logout mechanism is incomplete, enabling an attacker to forge a request and execute customer commands. The issue is documented as fixed in version 1.7.7.2. The CVSS metrics indicate a network-based, low-complexity exposure with vary...