low3.5
CVE-2020-28838
Cross Site Request Forgery (CSRF) in CART option in OpenCart Ltd.
Impact
Cross Site Request Forgery (CSRF) in CART option in OpenCart Ltd. Opencart CMS 3.0.3.6 allows attacker to add cart items via Add to cart.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opencart | Opencart | Version 3.0.3.6 |