high8.8
CVE-2026-50986
PrestaShop module, totadministrativemandate <1.8.1 is vulnerable to Cross Site Request Forgery (CSRF).
Impact
PrestaShop module, totadministrativemandate <1.8.1 is vulnerable to Cross Site Request Forgery (CSRF). The payment validation controller has no CSRF token. An attacker can confirm an order in an awaiting status by hijacking a link.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| PrestaShop | PrestaShop Module, Totadministrativemandate | before 1.8.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.