PT-2024-14186 · Ecwid · Ecwid Ecommerce Shopping Cart
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Ecwid Ecommerce Shopping Cart versions through 6.12.4
Description
The issue is a Cross-Site Request Forgery (CSRF) vulnerability in Ecwid Ecommerce Shopping Cart. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
Recommendations
For versions through 6.12.4, update to a version later than 6.12.4 to resolve the issue.
As a temporary workaround, consider implementing additional CSRF protection measures, such as token-based validation, to minimize the risk of exploitation.
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ecwid Ecommerce Shopping Cart