Description
Cross Site Request Forgery (CSRF) vulnerability in Express cart v1.1.16 allows attackers to add an administrator account, add discount code or other unspecified impacts.
Remediation
References
https://github.com/mrvautin/expressCart/issues/120
Related Vulnerabilities
CVE-2020-35217 Vulnerability in maven package io.vertx:vertx-web
CVE-2020-28452 Vulnerability in maven package com.softwaremill.akka-http-session:core_2.11
CVE-2023-39156 Vulnerability in maven package org.jenkins-ci.plugins:bazaar
CVE-2020-24922 Vulnerability in maven package com.xuxueli:xxl-job-admin
CVE-2020-12480 Vulnerability in maven package com.typesafe.play:play_2.11