PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Prestashop | Prestashop | * | 1.6.1.20 (excluding) |
Prestashop | Prestashop | 1.7.0.0 (including) | 1.7.3.4 (excluding) |