CVE-2026-50986

The PrestaShop module "totadministrativemandate" versions prior to 1.8.1 are susceptible to Cross Site Request Forgery (CSRF) due to the absence of a CSRF token in the payment validation controller. This vulnerability allows an attacker to manipulate order confirmations by hijacking links, potentially leading to unauthorized transactions. E-commerce platforms utilizing this module should prioritize patching to mitigate the risk of fraudulent order confirmations.