| Package | Affected versions | Patched versions |
|---|---|---|
| cs-cart japanese edition | = 4.3.10-jp-1 | |
| cs-cart multivendor japanese edition | = 4.3.10-jp-1 |
CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free