CVE-2026-50986

CVE-2026-50986 affects the PrestaShop module totadministrativemandate prior to 1.8.1. The root cause is a missing CSRF token in the payment validation controller, enabling CSRF exploitation to confirm an order in the awaiting state by hijacking a link. The CVSS vector indicates high impact to con...

CVE-2026-44212 PrestaShop: Stored XSS executable in customer service view

PrestaShop is an open source e-commerce web application. Prior to 8.2.6 and 9.1.1, there is a stored Cross-Site Scripting XSS vulnerability in the PrestaShop back-office Customer Service view. An unauthenticated attacker can submit the public Contact Us form with a malicious email address. The...

PrestaShop Cross-Site Request Forgery Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site request forgery vulnerability exists in PrestaShop versions prior to...