Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-43149 | 1 Spa-cart | 1 Spa-cart | 2024-11-21 | N/A | 8.8 HIGH |
SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status. | |||||
CVE-2023-43148 | 1 Spa-cart | 1 Spa-cart | 2024-11-21 | N/A | 8.1 HIGH |
SPA-Cart 1.9.0.3 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to delete all accounts. |