Commerceguys

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Commerceguys records in CISA KEV

No Commerceguys vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Commerce 2 records LOW Commerce Reorder 1 record LOW

Records

1 record in Commerce Reorder · all components

TI-2012-01889 CVE-2012-2116 · GHSA-qmc3-2gf7-hwhf

Cross-site request forgery (CSRF) vulnerability in the Commerce Reorder module before…

LOW 32

Cross-site request forgery (CSRF) vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00984 Published 2012-08-31 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	2
Low	1
No CVSS	0