Non catégorisé
Vulnerability Disclosure
29 July 2026
CVE-2026-50986 Cross Site Request Forgery (CSRF) on Administrative Mandate
PrestaShop module, Administrative Mandate (totadministrativemandate) edited by 202 ecommerce <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF). The payment validation controller has no CSRF token. An attacker can create an order in an awaiting status by hijacking a link. Summary Published at: 2026-07-29Advisory source: 202-ecommerce.comPlatform: PrestaShopProduct: totadministrativemandateImpacted release: <= 1.8.1 (1.8.2 patch)Product author: […]
Read more