Vulnerabilities in e-commerce session handling can allow attackers to hijack active shopping sessions, impersonate customers without passwords, and use that access to steal customer data, place fraudulent orders, or install tools that capture payment information.
high
vulnerability
Describes a class of security flaw affecting session management on online stores.