CVE-2025-30746 | Oracle iStore up to 12.2.14 Shopping Cart cross-site request forgery (EUVD-2025-21533)
A vulnerability was found in Oracle iStore up to 12.2.14. It has been classified as critical. This affects an unknown part of the component Shopping Cart. The manipulation leads to cross-site request forgery.
This vulnerability is uniquely identified as CVE-2025-30746. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.