GHSA-mqq7-wxx5-mp8h
ps_checkout allows unauthorized method invocation through unvalidated parameter
Quick fix
GHSA-mqq7-wxx5-mp8h — prestashop/ps_checkout: upgrade to the fixed version with the command below.
composer require prestashop/ps_checkout:^5.3.0Details
### Impact
Unvalidated parameter can lead to some unauthorized method invocation with very little possibilities.
### Patches
The problem has been patched in versions
- v5.3.0 for PrestaShop 1.7 (build number: 7.5.3.0) - v5.3.0 for PrestaShop 8 (build number: 8.5.3.0) - v5.3.0 for PrestaShop 9 (build number: 9.5.3.0)
Read the [Versioning policy](https://github.com/PrestaShopCorp/ps_checkout/wiki/Versioning) to learn more about the build numbers.
### Credits
PrestaShop thanks [PATICEO](https://www.paticeo.com/) for reporting the issue.
Are you affected?
Enter the version of the package you're using.
Affected packages
0Fixed in: 5.3.0composer require prestashop/ps_checkout:^5.3.0