Express Shop < 4.0.3 - CSRF Bypass

Description

The plugin did not properly check for CSRF in its qcld_express_variable_product_quick_view AJAX action, allowing attacker to make user call it via a CSRF attack.