PT-2026-95156

Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.7.5 Description An authorization bypass exists in the GDPR tools located in the admin/sources/customers.gdpr.inc.php file. The system relies on page-level CC PERM READ access and fails to require CC PERM DELETE for...