PT-2026-39526

Name of the Vulnerable Software and Affected Versions OpenCart version 3.0.3.7 Description A cross-site request forgery CSRF issue allows attackers to change user passwords by sending crafted requests to the 'account/password' endpoint. Attackers can trick authenticated users into submitting hidd...