CVE-2021-43158

In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart

published December 22, 2021

CVSS
—
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00469 · 39.6th percentile
Published
2021-12-22T17:27Z
EPSS history
Timeline
  • 22 DEC 17:27Z
    In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart
    cvelistv5