CVE-2022-23063

Name of the Vulnerable Software and Affected Versions Shopizer versions 2.3.0 through 3.0.1

Description The issue is related to insufficient session expiration. When a user's password is changed by themselves or an administrator, a user who was already logged in will still have access to the application even after the password change.

Recommendations For Shopizer versions 2.3.0 through 3.0.1, consider implementing a mechanism to invalidate existing sessions when a user's password is changed, ensuring that users are required to log in again after a password change. At the moment, there is no information about a newer version that contains a fix for this vulnerability.