{"id":30481,"date":"2026-09-29T20:32:13","date_gmt":"2026-09-29T12:32:13","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-41875"},"modified":"2026-09-29T20:32:13","modified_gmt":"2026-09-29T12:32:13","slug":"cve-2026-41875","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-41875","title":{"rendered":"CVE-2026-41875 &#8211; Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious at"},"content":{"rendered":"<p>Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request that changes admin&#8217;s login and password.<br \/>\nThis software does implement simple protection against this type of attack, but it is easily bypassed by manipulating the referer header. All forms available in this software are potentially vulnerable.<\/p>\n<p>This issue was fixed in a patch to version 6.7 published on 09.11.2026, deployments without this patch are still vulnerable<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request that<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-30481","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/30481","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=30481"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=30481"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=30481"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}