Filtered by vendor Spa-cart Subscriptions
Filtered by product Spa-cart Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-43148 1 Spa-cart 1 Spa-cart 2024-09-18 8.1 High
SPA-Cart 1.9.0.3 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to delete all accounts.
CVE-2023-43149 1 Spa-cart 1 Spa-cart 2024-09-18 8.8 High
SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status.