high8.8
CVE-2022-46074
Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF).
Impact
Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated user can add an admin account due to missing CSRF protection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Helmet Store Showroom Project | Helmet Store Showroom | Version 1.0 |