high7.5
CVE-2024-36677
In the module "Login as customer PRO" (loginascustomerpro) <1.2.7 from Weblir for PrestaShop, a guest can access direct link to connect to each customer accoun…
Impact
In the module "Login as customer PRO" (loginascustomerpro) <1.2.7 from Weblir for PrestaShop, a guest can access direct link to connect to each customer account of the Shop if the module is not installed OR if a secret accessible to administrator is stolen.
Affected products
| Product | Affected versions |
|---|---|
| Module "Login As Customer PRO" (Loginascustomerpro) | before 1.2.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.