Description
In PrestaShop before 1.7.6.0 RC2, the id_address_delivery and id_address_invoice parameters are affected by an Insecure Direct Object Reference vulnerability due to a guessable value sent to the web application during checkout. An attacker could leak personal customer information. This is PrestaShop bug #14444.
Remediation
References
Related Vulnerabilities
WordPress Plugin ImageBoss-Images Up To 60% Smaller & CDN Cross-Site Scripting (3.0.4)
Microsoft SQL Server Other Vulnerability (CVE-2000-0654)
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-1133)
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-50184)