CVE-2009-4121

CVE-2009-4121 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4. An unauthenticated attacker could exploit these flaws to hijack an administrator's session and perform actions such as deleting web pages, products, or orders without their consent. The vulnerability has a CVSS score of 6.8, indicating a medium severity, as it can be exploited remotely with moderate complexity to achieve partial confidentiality, integrity, and availability impacts. There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.