Quick.Cart vulnerabilities

CVEs whose affected-version data names the Quick.Cart package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-41875Medium· 6.9

today

Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel

Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request that changes admin's login and password. …

▾ SunlitOpenSolution · Quick.Cartvia NVD