Vulnerabilities (CVE)

Filtered by vendor Iwebshop Subscribe
Filtered by product Iwebshop
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-19047 1 Iwebshop 1 Iwebshop 2024-11-21 6.8 MEDIUM 8.8 HIGH
Cross Site Request Forgey (CSRF) in iWebShop v5.3 allows remote atatckers to execute arbitrary code via malicious POST request to the component '/index.php?controller=system&action=admin_edit_act'.