CVE-2026-71531

PrestaShop versions before 8.2.9 and 9.2.1 contain an authorization flaw in the Webservice API (specifically via classes/webservice/WebserviceRequest.php). An attacker possessing a key restricted to a single shop can bypass shop restrictions by submitting requests with id_shop=all or id_shop_grou...