CVE-2025-15399

CVE-2025-15399 is a cross-site request forgery (CSRF) vulnerability (CWE-352) affecting IBM Common Licensing (also known as IBM License Key Server Administration and Reporting Tool / LKS Administration Agent) versions 9.0, 9.0.0.1, and 9.0.0.2 . An attacker could execute malicious and unauthorize...

CVE-2025-15399 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

EUVD-2026-82988

A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects unknown code. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been made available to the public an...

CVE-2026-93531 gedelumbung HospitalManagement cross-site request forgery

A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects unknown code. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been made available to the public an...

CVE-2026-93531

CVE-2026-93531 affects gedelumbung HospitalManagement (up to commit c2d45543789a3887067d3915f69d44cfc2cf76a8), introducing a cross-site request forgery (CSRF) weakness in unspecified code. The attack is remote , requires no prior privileges but does require user interaction , resulting in a low i...

CVE-2026-93456

django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed-in editors visiting a malicious page can be tricked into storing unescaped content that renders to all visitors,...

CVE-2026-93456 django-page-cms through 2.0.13 CSRF via admin mutation views

django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed-in editors visiting a malicious page can be tricked into storing unescaped content that renders to all visitors,...

CVE-2026-93456

django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. A signed-in editor visiting a malicious page can be tricked into storing unescaped content that renders to all visitors, en...

CVE-2026-93456 django-page-cms through 2.0.13 CSRF via admin mutation views

django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed-in editors visiting a malicious page can be tricked into storing unescaped content that renders to all visitors,...

EUVD-2026-82616

django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed-in editors visiting a malicious page can be tricked into storing unescaped content that renders to all visitors,...

PT-2026-95681

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A cross-site request forgery CSRF issue allows a remote attacker to bypass security restrictions. CSRF is a type of attack that tricks a victim into submitting a malicious request. It occur...

PT-2026-95686

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A cross-site request forgery CSRF issue exists, which could allow a remote attacker to bypass security restrictions. CSRF is a type of attack that tricks a victim into submitting a maliciou...

PT-2026-95476

Name of the Vulnerable Software and Affected Versions Mojolicious versions prior to 9.48 Description The CSRF helpers csrf field, csrf token, and csrf protect reuse an unchanged per-session token in rendered HTML. When response compression is enabled and attacker-influenced content is reflected i...

CVE-2026-93531: Cross-Site Request Forgery (CSRF)

A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects unknown code. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been made available to the public an...

CVE-2026-84084: Cross-Site Request Forgery (CSRF)

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery CSRF vulnerability...

CVE-2026-93456: Cross-Site Request Forgery (CSRF)

django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed-in editors visiting a malicious page can be tricked into storing unescaped content that renders to all visitors,...

WordPress Core <= 7.1 - Cross-Site Request Forgery to Theme Install and Preview vulnerability

Cross-Site Request Forgery to Theme Install and Preview vulnerability discovered by Paulos Yibelo, pwn.ai in WordPress core versions = 7.1...

CVE-2026-93873: Cross-Site Request Forgery (CSRF)

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing attackers to forge messages. Attackers can auto-submit contact forms from attacker-controlled pages to send forged messages attributed to authenticated victims to the administrator inbox...

CVE-2025-15399: Cross-Site Request Forgery (CSRF)

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2026-84077: Cross-Site Request Forgery (CSRF)

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability...