PrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Prestashop | Prestashop | 1.5.5.0 (including) | 1.5.5.0 (including) |