CVE-2024-36677

In the module "Login as customer PRO" loginascustomerpro 1.2.7 from Weblir for PrestaShop, a guest can access direct link to connect to each customer account of the Shop if the module is not installed OR if a secret accessible to administrator is stolen...

CVE-2024-36677

The Login as customer PRO (loginascustomerpro) module by Weblir for PrestaShop is vulnerable in versions prior to 1.2.7 . A guest can access a direct link to connect to every customer account in the shop if the module is not installed or if an administrator-accessible secret is stolen. This vulne...