CVE-2025-6106

WuKongOpenSource WukongCRM 9.0 is affected by a cross‑site request forgery in the AdminRoleController.java processing path. The issue can be triggered remotely and has been publicly disclosed; multiple sources describe the vulnerability as enabling unauthorized operations via CSRF. Some feeds not...