CVE-2026-50986

Summary

PrestaShop module, totadministrativemandate <1.8.1 is vulnerable to Cross Site Request Forgery (CSRF). The payment validation controller has no CSRF token. An attacker can confirm an order in an awaiting status by hijacking a link.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://addons.prestashop.com/fr/paiement-transfert-bancaire/6297-mandat-administratif.html
• https://prestafence.com/en/2026/07/cve-2026-50986-csrf-administrative-mandate/

• ←Previous
• Next→