CVE-2024-36677
In the module "Login as customer PRO" (loginascustomerpro) <1.2.7 from Weblir for PrestaShop, a guest can access direct link to connect to each customer account of the Shop if t…
Published: 2024-06-19 · CVSS: 7.5 · CVSS 3.1
In the module "Login as customer PRO" (loginascustomerpro) <1.2.7 from Weblir for PrestaShop, a guest can access direct link to connect to each customer account of the Shop if the module is not installed OR if a secret accessible to administrator is stolen.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7