CVE-2022-46074EPSS p40.8%

CVE-2022-46074CVE-2022-46074

helmet_store_showroom_project / helmet_store_showroom

Description

Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated user can add an admin account due to missing CSRF protection.

Scoring

CVSS 8.8 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS0.50% probability of exploitation · percentile 40.8% · 2026-10-05T12:00:23Z
Last modified2026-06-17
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.