Lucene search
+L

43947 matches found

RedhatCVE
RedhatCVE
added 2026/01/06 5:07 p.m.11 views

CVE-2025-53344

Cross-Site Request Forgery CSRF vulnerability in ThimPress Thim Core allows Cross Site Request Forgery.This issue affects Thim Core: from n/a through 2.3.3...

4.3CVSS5.1AI score0.00118EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/06 3:52 p.m.46 views

CVE-2020-36918 iDS6 DSSPro Digital Signage System 6.2 Cross-Site Request Forgery via User Management

iDS6 DSSPro Digital Signage System 6.2 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without request validation. Attackers can craft malicious web pages to trick logged-in administrators into adding unauthorized users by exploiting the...

5.1CVSS0.00161EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2026/01/06 3:52 p.m.7 views

CVE-2020-36906 P5 FNIP-8x16A FNIP-4xSH 1.0.20 Cross-Site Request Forgery via User Management

P5 FNIP-8x16A FNIP-4xSH 1.0.20 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to add new admin users, change passwords, and modify system configurations by tricking...

5.3CVSS6.3AI score0.00161EPSS
SaveExploits1References7
OSV
OSV
added 2026/01/05 4:15 p.m.11 views

CVE-2025-67315

Cross Site Request Forgery vulnerability in Employee Leave Management System v.2.1 allows a remote attacker to escalate privileges via the manage-employee.php component...

5.4CVSS5.8AI score0.0007EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/05 12:00 a.m.33 views

CVE-2025-67315

...

0.0007EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/01/05 12:00 a.m.38 views

PT-2026-1294

Name of the Vulnerable Software and Affected Versions Employee Leave Management System version 2.1 Description A Cross Site Request Forgery issue exists in Employee Leave Management System version 2.1. A remote attacker can potentially escalate privileges through the manage-employee.php component...

5.4CVSS5.9AI score0.0007EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/01/01 5:33 p.m.14 views

CVE-2025-62101

Cross-Site Request Forgery CSRF vulnerability in Omid Shamloo Pardakht Delkhah pardakht-delkhah allows Cross Site Request Forgery.This issue affects Pardakht Delkhah: from n/a through = 3.0.0...

4.3CVSS5.9AI score0.00144EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 4:27 p.m.15 views

CVE-2025-63040

Cross-Site Request Forgery CSRF vulnerability in Saad Iqbal Post Snippets post-snippets allows Cross Site Request Forgery.This issue affects Post Snippets: from n/a through = 4.0.11...

4.3CVSS5.9AI score0.00117EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 4:26 p.m.24 views

CVE-2025-62123

Cross-Site Request Forgery CSRF vulnerability in inkthemes WP Gmail SMTP wp-gmail-smtp allows Cross Site Request Forgery.This issue affects WP Gmail SMTP: from n/a through = 1.0.7...

4.3CVSS5.9AI score0.00144EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 4:26 p.m.23 views

CVE-2025-62089

Cross-Site Request Forgery CSRF vulnerability in MERGADO Mergado Pack mergado-marketing-pack allows Cross Site Request Forgery.This issue affects Mergado Pack: from n/a through = 4.2.1...

4.3CVSS5.9AI score0.00117EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/01 3:02 p.m.37 views

CVE-2025-15405 PHPEMS cross-site request forgery

A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely...

5.3CVSS0.00246EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/01/01 9:12 a.m.19 views

CVE-2025-62992

Cross-Site Request Forgery CSRF vulnerability in everestthemes Everest Backup everest-backup allows Path Traversal.This issue affects Everest Backup: from n/a through = 2.3.11...

8.1CVSS5.9AI score0.00197EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 6:25 a.m.16 views

CVE-2025-49342

Cross-Site Request Forgery CSRF vulnerability in merzedes Custom Style custom-style allows Stored XSS.This issue affects Custom Style: from n/a through = 1.0...

7.1CVSS5.9AI score0.00112EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 6:25 a.m.21 views

CVE-2025-49353

Cross-Site Request Forgery CSRF vulnerability in Marcin Kijak Noindex by Path noindex-by-path allows Stored XSS.This issue affects Noindex by Path: from n/a through = 1.0...

7.1CVSS5.9AI score0.00112EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 5:32 a.m.20 views

CVE-2025-49344

Cross-Site Request Forgery CSRF vulnerability in reneade SensitiveTagCloud sensitive-tag-cloud allows Stored XSS.This issue affects SensitiveTagCloud: from n/a through = 1.4.1...

7.1CVSS5.9AI score0.00112EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/31 8:15 p.m.18 views

CVE-2025-31054

Cross-Site Request Forgery CSRF vulnerability in Themefy Bloggie allows Reflected XSS.This issue affects Bloggie: from n/a through 2.0.8...

7.1CVSS0.00106EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/31 6:30 p.m.10 views

EUVD-2025-206018

Cross-Site Request Forgery CSRF vulnerability in Manidoraisamy FormFacade allows Cross Site Request Forgery.This issue affects FormFacade: from n/a through 1.4.1...

4.3CVSS6.3AI score0.00117EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/12/31 5:06 p.m.11 views

CVE-2025-62112

Cross-Site Request Forgery CSRF vulnerability in Merv Barrett Import into Easy Property Listings easy-property-listings-xml-csv-import allows Cross Site Request Forgery.This issue affects Import into Easy Property Listings: from n/a through = 2.2.1...

4.3CVSS5.9AI score0.00154EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/31 4:20 p.m.15 views

WordPress Co-marquage service-public.fr plugin <= 0.5.77 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Co-marquage service-public.fr versions = 0.5.77...

4.3CVSS6.8AI score0.00144EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/12/31 4:15 p.m.11 views

CVE-2025-62089

Cross-Site Request Forgery CSRF vulnerability in MERGADO Mergado Pack mergado-marketing-pack allows Cross Site Request Forgery.This issue affects Mergado Pack: from n/a through = 4.2.1...

4.3CVSS0.00117EPSS
SaveExploits0References1
Rows per page
Query Builder