Description
A cross-site request forgery (CSRF) vulnerability exists in the checkout cart item of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited at the time of editing or configuration.
Remediation
References
Related Vulnerabilities
WordPress Plugin Chamber Dashboard Business Directory Cross-Site Scripting (3.2.8)
WordPress Plugin Lingotek Translation Multiple Cross-Site Scripting Vulnerabilities (1.1.8)
WordPress Plugin CSV Importer Multiple Unspecified Vulnerabilities (0.3.7)