PT-2024-14186 · Ecwid · Ecwid Ecommerce Shopping Cart

·

CVE-2023-51533

·

Published

2024-02-28

·

Updated

2025-04-28

CVSS v3.1

6.1

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Ecwid Ecommerce Shopping Cart versions through 6.12.4
Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability in Ecwid Ecommerce Shopping Cart. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
Recommendations For versions through 6.12.4, update to a version later than 6.12.4 to resolve the issue. As a temporary workaround, consider implementing additional CSRF protection measures, such as token-based validation, to minimize the risk of exploitation.

Fix

CSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-51533

Affected Products

Ecwid Ecommerce Shopping Cart