1 pointThis may be the solution you are looking for: https://github.com/cubecart/v6/issues/1771
1 pointWelcome son caocao! Glad to see you made it to the forums. One of the differences between CC615 and the latest version is that a lot of XSS deterrence has been implemented. That means for many events, the correct security token needs to accompany the request. If that correct token is not there, the session will get discarded.