CVE-2024-36677

In the module "Login as customer PRO" loginascustomerpro 1.2.7 from Weblir for PrestaShop, a guest can access direct link to connect to each customer account of the Shop if the module is not installed OR if a secret accessible to administrator is stolen...

CVE-2024-36677

The Login as customer PRO (loginascustomerpro) module for PrestaShop , developed by Weblir , is vulnerable in versions prior to 1.2.7 . The root cause allows a guest to access a direct link to connect to any customer account in the shop if the module is not installed or if a secret accessible to ...