GSA_kwCzR0hTQS0zajZtLW01djUtOTc4Nc4AAm2e

Low EPSS: 0.00096% (0.27879 Percentile) EPSS:

Permalink JSON

OpenCart Cross-Site Request Forgery (CSRF)

Affected Packages	Affected Versions	Fixed Versions
packagist:opencart/opencart	= 3.0.3.6	No known fixed version
12 Dependent packages 15 Dependent repositories 35,114 Downloads total Affected Version Ranges All affected versions

Cross Site Request Forgery (CSRF) in CART option in OpenCart Ltd. Opencart CMS 3.0.3.6 allows attacker to add cart items via Add to cart.

References: