Quick.Cart.Ext versions 6.7 and below remote admin add cross site request forgery exploit. Continue reading...