CVE-2025-50847

MediumCVSS 6.5

Published: 31/07/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

3th percentile - higher than 3% of all known CVEs

Summary

A Cross Site Request Forgery (CSRF) vulnerability was found in CS Cart 4.18.3. It allows attackers to add products to a user's comparison list via a crafted HTTP request.

Risk Assessment

An attacker can manipulate the victim's comparison list, potentially causing misinformation or influencing the user's purchasing decisions. The vulnerability requires no user interaction beyond visiting a malicious page.

Recommendation

Update CS Cart to the latest version that includes a fix for the CSRF vulnerability. Additionally, implement CSRF protection mechanisms such as anti-CSRF tokens.

Original NVD description (English source)

Cross Site Request Forgery (CSRF) vulnerability in CS Cart 4.18.3, allows attackers to add products to a user's comparison list via a crafted HTTP request.