PT-2020-16882

Name of the Vulnerable Software and Affected Versions osCommerce Phoenix CE versions prior to 1.0.5.4 Description The issue allows for a CSRF attack in the admin/define language.php file. Recommendations For versions prior to 1.0.5.4, update to version 1.0.5.4 or later to resolve the issue...