PT-2021-10276

Name of the Vulnerable Software and Affected Versions: iWebShop version 5.3 Description: The issue allows remote attackers to execute arbitrary code via a malicious POST request to the "/index.php?controller=system&action=admin edit act" API endpoint. This is a Cross Site Request Forgery CSRF...