← Database

CVE-2021-43158

MEDIUM CVSS: 4.3 Published: 2021-12-22 Modified: 2026-06-17

Description

In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart.

Affected Platforms

Projectworlds Online Shopping System

Weakness Type

CWE-352

References