Threats tagged 'ghsa-m6p5-h26j-pxv5'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-122151Presenton · Cross-Site Request Forgery Medium5.32026-11-05GCVE DatabaseCVE-2026-122151 A cross-site request forgery (CSRF) vulnerability exists in Presenton versions up to 0.9.11-beta in the JSON.parse function of the /api/user-config endpoint within the User Configuration Handler component. This vulnerability allows remote attackers to manipulate user configuration via CSRF attacks. The issue is addressed by upgrading to version 0.9.12-beta. Report on CVE-2026-122151 Vulnerability CWE-352 #ghsa-m6p5-h26j-pxv5	GCVE Database	2026-11-05

Page 1 of 1