Description
It was possible to download all receipts without authentication. Must first access the API https://XXXX.supersmart.me/services/v4/customer/signin to get a TOKEN. Then you can then access the API that provides invoice images based on the URL https://XXXX.supersmart.me/services/v4/invoiceImg?orderId=XXXXX
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Supersmart.me | Supersmart.me – Walk Through | Update to the latest version – < Update to the latest version* | Update to the latest version* |