CVE-2020-27997: Cross-Site Request Forgery (CSRF)

An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery CSRF protection may lead to elevation of privileges e.g., /admin/customer/create to create an admin account...

PT-2020-16899

Name of the Vulnerable Software and Affected Versions SmartStoreNET versions prior to 4.1.0 Description The issue is related to a lack of Cross Site Request Forgery CSRF protection, which may lead to elevation of privileges. For example, an attacker could exploit this issue to create an admin...