Description
Cross Site Request Forgery (CSRF) vulnerability in Express cart v1.1.16 allows attackers to add an administrator account, add discount code or other unspecified impacts.
Remediation
References
https://github.com/mrvautin/expressCart/issues/120
Related Vulnerabilities
CVE-2014-4671 Vulnerability in npm package hapi
CVE-2022-36920 Vulnerability in maven package org.jenkins-ci.plugins:coverity
CVE-2023-49377 Vulnerability in maven package com.jfinal:jfinal
CVE-2018-5673 Vulnerability in maven package org.apache.geronimo.plugins:dojo
CVE-2020-2321 Vulnerability in maven package org.jenkins-ci.plugins:shelve-project-plugin