CVE-2023-48926

MEDIUM 5.3CVE-2023-48926 · Published 16/01/2024 · updated 17/06/2026

In short

CVE-2023-48926 is a MEDIUM (CVSS 5.3) vulnerability affecting advanced loyalty program (prestashop).
Chance of exploitation in the next 30 days (EPSS): 0.35%, higher than 28.2% of all vulnerabilities.
Fix: update to 2.3.4 or later.

Package	Affected versions	Patched versions
advanced loyalty program prestashop	`< 2.3.4`	`2.3.4`

Description

An issue in 202 ecommerce Advanced Loyalty Program: Loyalty Points before v2.3.4 for PrestaShop allows unauthenticated attackers to arbitrarily change an order status.

References

202ecommerce/security-advisories security advisory · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free