CVE-2021-43158: Projectworlds Online Shopping System

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart.

Affected products

• Projectworlds Online Shopping System: version 1.0 only

Published 2021-12-22. Last modified 2026-06-17.