Security Advisory
CVE-2021-41074
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admin's email address via a crafted HTML document.