Description
/upload/catalog/controller/account/password.php in OpenCart through 3.0.2.0 has CSRF via the index.php?route=account/password URI to change a user's password.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2013-5846 Vulnerability (CVE-2013-5846)
MongoDb Incorrect Authorization Vulnerability (CVE-2026-13067)
WordPress Plugin Mail Masta Multiple SQL Injection Vulnerabilities (1.0)
Drupal Core 9.1.x Cross-Site Scripting (9.1.0 - 9.1.13)
WordPress Plugin Wufoo Shortcode Cross-Site Scripting (1.47)