Unscored CVE-2019-20178 EUVD-2019-10732GHSA-637m-w3h7-gjfv

Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user.

Published Jan 9, 2020 · Updated Aug 5, 2024 · Assigned by mitre

Description

Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user.

References

https://medium.com/%40Pablo0xSantiago/cve-2019-20178-peel-shopping-ecommerce-shopping-cart-9-2-1-cross-site-request-forgery-17fc49ab5a65