Vulnerabilities (CVE)

Filtered by vendor Spa-cart Subscribe
Filtered by product Spa-cart
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-43148 1 Spa-cart 1 Spa-cart 2024-02-28 N/A 8.1 HIGH
SPA-Cart 1.9.0.3 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to delete all accounts.
CVE-2023-43149 1 Spa-cart 1 Spa-cart 2024-02-28 N/A 8.8 HIGH
SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status.