CVE-2025-10317

Name of the Vulnerable Software and Affected Versions Quick.Cart version 6.7 Quick.Cart (affected versions not specified)

Description Quick.Cart is susceptible to Cross-Site Request Forgery in the product creation functionality. A malicious actor can create a specially crafted website that, when visited by an administrator, automatically submits a POST request to create a malicious product with content controlled by the attacker. The software lacks protection against this type of attack, and all forms within the application are potentially vulnerable. The vendor was contacted regarding this issue but did not provide details about the vulnerability or affected version range.

Recommendations Quick.Cart version 6.7 should be updated when a patch becomes available. For all other affected versions, update when a patch becomes available.