PT-2026-66857 · Undefined · Undefined
CVE-2026-50986
·
Published
2026-07-31
·
Updated
2026-07-31
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
PrestaShop module, totadministrativemandate <1.8.1 is vulnerable to Cross Site Request Forgery (CSRF). The payment validation controller has no CSRF token. An attacker can confirm an order in an awaiting status by hijacking a link.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined