CVE-2023-43149

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status

published October 12, 2023

CVSS
—
EPSS
1%
Percentile
51.9
In the wild
Unconfirmed
What it is

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00682 · 51.9th percentile
Published
2023-10-12T00:00Z
EPSS history
Timeline
  • 12 OCT 00:00Z
    SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status
    cvelistv5