CVE-2026-50986

CVE-2026-50986 affects the PrestaShop module totadministrativemandate prior to 1.8.1. The root cause is a missing CSRF token in the payment validation controller, enabling CSRF exploitation to confirm an order in the awaiting state by hijacking a link. The CVSS vector indicates high impact to con...