PT-2026-94081 · Prestashop+1 · Psgdpr

George Chen

·

CVE-2026-92809

·

Published

2026-09-16

·

Updated

2026-09-16

CVSS v4.0

5.3

Medium

VectorAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions PrestaShop psgdpr versions prior to 1.4.4
Description The software fails to validate that GDPR consent log entries are attributed to the authenticated customer. This allows authenticated attackers to submit arbitrary customer identifiers to create forged consent records for other customers, which results in the corruption of audit logs.
Recommendations Update PrestaShop psgdpr to version 1.4.4 or later.

Exploit

Fix

IDOR

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-92809

Affected Products

Psgdpr