CVE-2022-26180: Qdpm

High severity, CVSS 8.8. EPSS: 3.8% chance of exploitation in the next 30 days.

qdPM 9.2 allows Cross-Site Request Forgery (CSRF) via the index.php/myAccount/update URI.

Affected products

• Qdpm Qdpm: version 9.2 only

Published 2022-04-08. Last modified 2026-06-17.