Cross Site Request Forgery (CSRF) in CART option in OpenCart Ltd. Opencart CMS 3.0.3.6 allows attacker to add cart items via Add to cart.
- https://www.exploit-db.com/exploits/49228
No PoCs found on GitHub currently.