I am exploring the vulnerability (CVE-2020-5250) found in PrestaShop software versions <184.108.40.206. Could somebody explain how (with which method) was the program exactly exploitable? And why is the patch provided adequate? Is this a common mistake made when developing software in php? Could not find any information on this topic and thought it would help other developers to learn from this mistake.
Thank you in advance!