CVE-2026-77029

Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo 4.1.66...

CVE-2026-77029

Zoo , a Joomla extension by yootheme.com , is affected by a missing CSRF token vulnerability on front-end state changes in versions prior to 4.1.66 . The CVSS 4.0 base score is 4.6 (MEDIUM) , with high privileges and active user interaction required, resulting in low integrity impact . No exploit...

CVE-2025-67651: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions,...

Open WebUI Cross-Site Request Forgery (CSRF) Vulnerability

A vulnerability in open-webui/open-webui versions = 0.3.8 allows remote code execution by non-admin users via Cross-Site Request Forgery CSRF. The application uses cookies with the SameSite attribute set to lax for authentication and lacks CSRF tokens. This allows an attacker to craft a malicious...

Tenda AC7 Cross-Site Request Forgery Vulnerability

The Tenda AC7 is a 1200m1 11ac dual-band wireless router designed for large households undergoing broadband upgrades and router replacements. The Tenda AC7 has a cross-site request forgeing vulnerability, which stems from the fact that affected versions of the device lack CSRF protection for...

CVE-2025-12479: Cross-Site Request Forgery (CSRF)

Systemic Lack of Cross-Site Request Forgery CSRF Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2021-20102: Cross-Site Request Forgery (CSRF)

Machform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place...

ProActive CMS XSS / CSRF / Open Redirect

Exploit Title: ProActive CMS Multiple Vulnerabilities Google Dork: intext:"Powered by Proactive CMS" Exploit Author: Rafay Baloch Vendor Homepage: http://www.proactivecms.com Tested on: Linux Stored Cross Site Scripting: http://professional.inbusiness.com.au/admin.php?action=newuser Insert Your...