Description
PrestaShop module, totadministrativemandate <1.8.1 is vulnerable to Cross Site Request Forgery (CSRF). The payment validation controller has no CSRF token. An attacker can confirm an order in an awaiting status by hijacking a link.
High · 8.8
CVE-2026-50986
EUVD-2026-51644GHSA-5vj7-f9mv-5q68
PrestaShop module, totadministrativemandate <1.8.1 is vulnerable to Cross Site Request Forgery (CSRF). The payment validation controller ha…
Published Jul 31, 2026 · Updated Aug 3, 2026 · Assigned by mitre