jCart for OpenCart 2.3.0.2 Cross-Site Request Forgery
Vulnerability Description
jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information without authentication. Attackers can craft malicious HTML forms targeting endpoints , and to change user credentials, passwords, and affiliate account details when victims visit the attacker-controlled page.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-25336
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- L0RD or borna.nematzadeh123@gmail.com
Affected Vendor
jCart
View all reports →