CVE-2023-43149
SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status.
Published: 2023-10-12 · CVSS: Unscored
SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7