https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T03:50:57.453011+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-309952 EUVD-2026-309952 2026-10-07T03:50:57.456057+00:00 EUVD-2026-309952 https://cve.radiocsirt.org/vuln/fkie_cve-2021-47953 fkie_cve-2021-47953 2026-10-07T03:50:57.456091+00:00

OpenCart 3.0.3.7 contains a cross-site request forgery vulnerability that allows attackers to change user passwords by sending crafted requests to the account/password endpoint. Attackers can trick authenticated users into submitting hidden forms with new password values in the 'password' and 'confirm' parameters to hijack accounts.

 https://cve.radiocsirt.org/vuln/ghsa-fx8p-6qjq-9xvw GHSA-fx8p-6qjq-9xvw 2026-10-07T03:50:57.456125+00:00

OpenCart 3.0.3.7 contains a cross-site request forgery vulnerability that allows attackers to change user passwords by sending crafted requests to the account/password endpoint. Attackers can trick authenticated users into submitting hidden forms with new password values in the 'password' and 'confirm' parameters to hijack accounts.