CVE-2019-9769: Kartatopia Piluscart

High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days.

PilusCart 1.4.1 is vulnerable to index.php?module=users&action=newUser CSRF, leading to the addition of a new user as administrator.

Affected products

• Kartatopia Piluscart: version 1.4.1 only

Published 2019-03-14. Last modified 2026-06-17.