CVE-2023-48926 Information

Description

An issue in 202 ecommerce Advanced Loyalty Program: Loyalty Points before v2.3.4 for PrestaShop allows unauthenticated attackers to arbitrarily change an order status.

Reference

https://github.com/202ecommerce/security-advisories/security/advisories/GHSA-jp2c-mj65-qpmw