WS-2020-0427

In express-cart in versions 1.0.1 to 1.1.16 is vulnerable to CSRF. It allows attacker cheat admin to do bad behaviors . Main reason is csrf token isn't used...