CVE-2011-5011

CVE-2011-5011 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in xt:Commerce 3.0.4 SP2.1 and potentially earlier versions. These flaws allow remote attackers to hijack authenticated administrator sessions to perform actions such as elevating a new user to admin status or granting permissions to existing users. With a CVSS score of 6.8, this vulnerability is of medium severity, requiring medium attack complexity but potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.