CVE-2025-10317

Quick.Cart is vulnerable to Cross-Site Request Forgery in product creation functionality. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request creating a malicious product with content defined by the attacker. This software does not implement any protection against this type of attack. All forms available in this software are potentially vulnerable. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.7 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.

• CWE-352

• https://cert.pl/posts/2025/10/CVE-2025-10317
• https://opensolution.org/sklep-internetowy-quick-cart.html

Published

Oct 30, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10310The Rich Snippet Site Report plugin for WordPress is vulnera…4.9
• CVE-2025-10311The Comment Info Detector plugin for WordPress is vulnerable…4.3
• CVE-2025-10312The Theme Importer plugin for WordPress is vulnerable to Cro…4.3
• CVE-2025-10313The Find And Replace content for WordPress plugin for WordPr…7.2
• CVE-2025-10314Incorrect Default Permissions vulnerability in Mitsubishi El…8.8
• CVE-2025-10316The extension "Form to Database" is susceptible to Cross-Sit…2.3
• CVE-2025-10318A vulnerability was identified in JeecgBoot up to 3.8.2. Aff…8.8
• CVE-2025-10319A security flaw has been discovered in JeecgBoot up to 3.8.2…6.5
• CVE-2025-10320A vulnerability was detected in iteachyou Dreamer CMS up to …3.1
• CVE-2025-10321A flaw has been found in Wavlink WL-WN578W2 221110. Impacted…5.5
• CVE-2025-10322A vulnerability has been found in Wavlink WL-WN578W2 221110.…5.5
• CVE-2025-10323A vulnerability was found in Wavlink WL-WN578W2 221110. The …9.8