CVE-2022-46074: Helmet Store Showroom Project Helmet Store Showroom

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated user can add an admin account due to missing CSRF protection.

Affected products

• Helmet Store Showroom Project Helmet Store Showroom: version 1.0 only

Published 2022-12-14. Last modified 2026-06-17.