Threats affecting pkg:github/prestashop/psgdpr

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-92809PrestaShop psgdpr · Insecure Direct Object Reference Medium5.3EPSS 0.3%2026-09-16CVE Database V5CVE-2026-92809 PrestaShop psgdpr versions up to 1.4.3 contain an authorization bypass vulnerability where the system does not verify that GDPR consent log entries belong to the authenticated user. This allows authenticated attackers to submit arbitrary customer identifiers and create forged consent records for other customers, leading to corruption of audit logs. EPSS 0.3%Vulnerability #ghsa-hcvp-5vww-782q	CVE Database V5	2026-09-16

Page 1 of 1