CVE-2026-120207

The Thelia Page Module version before 2.0.4 is vulnerable to a cross-site request forgery (CSRF) vulnerability. This occurs because back-office delete routes for page tags, documents, and images lack sufficient CSRF tokens and permission checks . A remote attacker can entice a logged-in administr...