writeups.xyz / CSRF to RCE bug chain in Prestashop v1.7.6.4 and below

Submitter : c2a

Date: 18 April 2020

Bounty : undisclosed

Vulnerabilities :

• RCE
• CSRF
• Stored XSS
• Unrestricted File Upload

Programs :

• PrestaShop

Authors :

• Sivanesh Ashok (@Sivaneshashok)

Link :
https://blog.stazot.com/prestashop-csrf-to-rce-article/