Data leak via paypal guest checkout

[bugreport999]

Using paypal guest checkout you can log into and view other peoples orders and account details by creating an order without login into an account as long as the email address you give paypal at guest checkout matches an email address on the online store.

I have taken some screenshots of what you can access after using paypal guess checkout without login into your store software after creating an order (have blurred personal information) .

[joseantgv]

Maybe you are interested in this https://yeswehack.com/programs/prestashop

[Knowband Plugins]

Quote

long as the email address you give paypal at guest checkout matches an email address on the online store

As per our understanding, You are saying if my email id is [email protected] & placing order using the using the PayPal then PayPal will the details of the [email protected] but One thing is not clear i.e. How other customer will have access to my PayPal account i.e. [email protected] (As login into PayPal account is also required with the same email id)?

Kindly confirm if our understanding are correct regarding the issue?

Edited July 31, 2020 by Knowband Plugins
Update (see edit history)

[bugreport999]

You don't login to paypal you use paypal guest checkout. At no point would this lead to an paypal account being accessed only allows access to the linked account shop using PrestaShop as a store front.

Edited July 31, 2020 by bugreport999 (see edit history)

[bugreport999]

4 hours ago, joseantgv said:

Maybe you are interested in this https://yeswehack.com/programs/prestashop

Dosn't allow me to submit bug reports