Description
In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| shopizer-ecommerce | Shopizer | 2.3.0 – < unspecified, unspecified – ≤ 3.0.1 | unspecified |