Threats tagged 'ghsa-p49w-44mw-95j3'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.1%	CVE-2026-100524Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in the extensions manager that allows attackers to perform state-changing actions without anti-CSRF token validation Medium5.4EPSS 0.1%2026-09-26GCVE DatabaseCVE-2026-100524 Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in the extensions manager that allows attackers to perform state-changing actions without anti-CSRF token validation. Attackers can craft links or embed images to force administrators to install, update, pause, or unpause extensions by tricking them into visiting a malicious page while authenticated. EPSS 0.1%Vulnerability CWE-352 #ghsa-p49w-44mw-95j3	GCVE Database	2026-09-26

Page 1 of 1