TI-2018-15561 CVE-2018-25336 · GHSA-3wj7-c338-fgrvjCart for OpenCart 2.3.0.2 Cross-Site Request ForgeryPriority HIGH 70jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information without authentication.CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00191 · Published 2026-05-17 · No fix listed CWE-352