Threats tagged 'ghsa-j7f6-9r44-r4f9'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-116210Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos app that allows High7.12026-10-26GCVE DatabaseCVE-2026-116210 Webasyst Framework versions through 4.4.0 have a cross-site request forgery (CSRF) vulnerability in the Photos app. This flaw allows remote attackers to trick logged-in users into submitting forged POST requests that can delete photos or change access rights. The vulnerability exists because the Photos app does not enable the framework's opt-in CSRF protection. Report on CVE-2026-116210 Vulnerability CWE-352 #ghsa-j7f6-9r44-r4f9	GCVE Database	2026-10-26

Page 1 of 1