CVE-2024-28394

https://notcve.org/view.php?id=CVE-2024-28394

19 Mar 2024 — An issue in Advanced Plugins reportsstatistics v1.3.20 and before allows a remote attacker to execute arbitrary code via the Sales Reports, Statistics, Custom Fields & Export module. • https://addons.prestashop.com/en/customer-administration/28379-sales-reports-statistics-custom-fields-export.html • CWE-863: Incorrect Authorization •