Cross-Site Request Forgery in Quick.Cart by OpenSolution

CVE-2025-10317

What is CVE-2025-10317?

Quick.Cart, developed by OpenSolution, has a vulnerability that allows attackers to exploit Cross-Site Request Forgery (CSRF) in its product creation functionality. An attacker can design a malicious website that, when accessed by an administrator of Quick.Cart, will trigger a POST request automatically. This can lead to the unintended creation of a product with content determined by the attacker. As the software lacks adequate protection mechanisms against such CSRF attacks, all forms available within it are potentially at risk. Although version 6.7 has been confirmed vulnerable, it is unknown whether other versions may also be affected, as they have not been publicly tested.

References