CVE-2018-16483高 8.8A deficiency in the access control in module express-cart <=1.1.5 allows unprivileged users to add new users to the application as administr…
CVE-2018-12457高 8.8expressCart before 1.1.6 allows remote attackers to create an admin user via a /admin/setup Referer header.