medium5.4
CVE-2021-41074
A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admin's email address via a crafted HTML document.
Impact
A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admin's email address via a crafted HTML document.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webkul | Qloapps | Version 1.5.1 |