Sale of a 0-day exploit for PrestaShop and BINSHOPS

For informational purposes only.

Vulnerability type: Account Takeover + Data Exposure
Affected versions: all versions in the 1.7 series

According to the seller, the vulnerabilities enable a complete exploitation chain for account takeover. The seller further claims that targeting an account requires only a valid email address; the password, session, and administrator privileges are not needed.

Price: $1150

A seller advertises a 0-day exploit for PrestaShop and BINSHOPS, enabling account takeover and data exposure in all PrestaShop 1.7 versions. Only a valid email address is needed. Price: $1150.