VYPR

mandat-administratif

by Prestashop

CVEs (1)

  • CVE-2026-50986Jul 31, 2026
    risk 0.00cvss epss 0.00

    PrestaShop module, totadministrativemandate <1.8.1 is vulnerable to Cross Site Request Forgery (CSRF). The payment validation controller has no CSRF token. An attacker can confirm an order in an awaiting status by hijacking a link.