Threats tagged 'ghsa-xxh4-4cw5-j7pm'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-92810PrestaShop blockwishlist · Insecure Direct Object Reference Medium5.3EPSS 0.3%2026-09-16CVE Database V5CVE-2026-92810 CVE-2026-92810 is a medium severity vulnerability in PrestaShop's blockwishlist module up to version 3.0.2. It allows authenticated users to bypass authorization checks and access share tokens for any wishlist by manipulating wishlist identifiers. This enables attackers to read private wishlist contents of other customers by sequentially supplying wishlist IDs. EPSS 0.3%Vulnerability #ghsa-xxh4-4cw5-j7pm	CVE Database V5	2026-09-16

Page 1 of 1