Threats tagged 'ghsa-qhj7-vg24-mhw4'

OpenCart versions up to 4.1.0.4 have a business logic vulnerability that allows authenticated customers to place unpaid full-price orders by manipulating reward points after selecting the Free Checkout option. Attackers can apply reward points, save the Free Checkout selection, then submit zero points via the reward.save function, causing the order confirmation process to proceed without payment.