202ecommerce vulnerabilities
We track 2 vulnerabilities in 202ecommerce products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 26, 2024.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest 202ecommerce vulnerabilities
- 7.5 High severity
paypal: Improper Authorization
In the module "PayPal Official" for PrestaShop 7+ releases prior to version 6.4.2 and for PrestaShop 1.6 releases prior to version 3.18.1, a malicious customer can confirm an order even if payment is finally declined by PayPal. A logical weakness during the ca
- 9.8 Critical severity
paypal: Improper Neutralization of Special Elements used in an SQL Command
PrestaShop/paypal is an open source module for the PrestaShop web commerce ecosystem which provides paypal payment support. A SQL injection vulnerability found in the PrestaShop paypal module from release from 3.12.0 to and including 3.16.3 allow a remote atta