Medium severity6.5NVD Advisory· Published Jul 21, 2020· Updated Jun 17, 2026

CVE-2020-15102

Description

In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0.

Affected products

Prestashop/Dashboard Products
cpe:2.3:a:prestashop:dashboard_products:*:*:*:*:*:*:*:*
Range: <2.1.0
Prestashop/dashproductsllm-create
Range: <2.1.0
PrestaShop/dashproductsv5
Range: < 2.1.0

Patches

Vulnerability mechanics

References

github.com/PrestaShop/dashproducts/commit/f0799c13628a9b9ca6ca75c085b083d924a8ea7envdPatchThird Party Advisory
github.com/PrestaShop/dashproducts/security/advisories/GHSA-6292-4qpg-hvfgnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000