In ProjectWorlds Online Shopping System PHP 1.0, a CSRF... · CVE-2021-43158 · GitHub Advisory Database · GitHub

In ProjectWorlds Online Shopping System PHP 1.0, a CSRF...

Moderate severity Unreviewed Published Dec 23, 2021 to the GitHub Advisory Database • Updated Feb 3, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart.

References

Published by the National Vulnerability Database

Dec 22, 2021

Published to the GitHub Advisory Database Dec 23, 2021

Last updated Feb 3, 2023