Threats tagged 'ghsa-4gw8-mpvg-cxc6'

A cross-site request forgery (CSRF) vulnerability exists in Bdtask/CodeCanyon SalesERP versions up to 20250728. The vulnerability allows remote attackers to perform unauthorized actions by exploiting the lack of proper request validation. The vendor has not responded to disclosure attempts, and public exploit code is available. The vulnerability has a medium severity rating with a CVSS score of 4.3.