Lucene search
+L

2 matches found

Mend
Mend
•added 2026/03/11 7:21 p.m.•11 views

CVE-2026-31954

Emlog is an open source website building system. In 2.6.6 and earlier, the deleteasync action asynchronous delete lacks a call to LoginAuth::checkToken, enabling CSRF attacks...

7.3CVSS5.8AI score0.00175EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/11 12:00 a.m.•9 views

CVE-2026-31954: Cross-Site Request Forgery (CSRF)

Emlog is an open source website building system. In 2.6.6 and earlier, the deleteasync action asynchronous delete lacks a call to LoginAuth::checkToken, enabling CSRF attacks...

7.3CVSS5.9AI score0.00175EPSS
SaveExploits1References1
Rows per page
Query Builder