Security Advisory

CVE-2021-41074

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-12 00:00:00

Last updated 2026-01-12 20:24:00

Assigner mitre

State PUBLISHED

A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admins email address via a crafted HTML document.