Medium severity4.3NVD Advisory· Published May 23, 2026· Updated May 26, 2026

CVE-2018-25343

Description

Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests. Attackers can craft HTML forms targeting editprofile.php with hidden fields for email and password parameters that execute automatically when visited by an authenticated admin user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Smakosh/Smartshopreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =1

Patches

Vulnerability mechanics

References

www.behance.net/gallery/49080415/Smartshop-Free-e-commerce-websitenvd
www.exploit-db.com/exploits/44824nvd
www.vulncheck.com/advisories/smartshop-1-cross-site-request-forgery-via-editprofile-phpnvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000