CVE-2026-103938 OpenEMR: CSRF Protection Bypass on IPPF Point-of-Sale Void and Regen Operations

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, interface/patientfile/poscheckoutippf.php performs state-changing void, voidall, and regen operations through GET requests without CSRF token validation. The formchecksum...

CVE-2026-103938

The OpenEMR electronic health records application is vulnerable to a Cross-Site Request Forgery (CSRF) attack in versions prior to 8.3.0 . The component interface/patient_file/pos_checkout_ippf.php allows state-changing operations, such as void , voidall , and regen , to be executed via GET reque...

CVE-2026-73099

Cross-Site Request Forgery CSRF vulnerability in Apache Juneau. The REST server accepts a "content" query parameter that replaces the request body, and this is enabled by default on every HTTP method, including GET. A cross-site link can therefore deliver an attacker-chosen request body to an...

CVE-2026-73099

A Cross-Site Request Forgery (CSRF) vulnerability exists in Apache Juneau versions through 9.2.0 . The REST server's default behavior allows the "content" query parameter to replace the request body for all HTTP methods, including GET. This enables an attacker to deliver a chosen request body via...

EUVD-2026-117408

Cross-Site Request Forgery CSRF vulnerability in Apache Juneau. The REST server accepts a "content" query parameter that replaces the request body, and this is enabled by default on every HTTP method, including GET. A cross-site link can therefore deliver an attacker-chosen request body to an...

CVE-2026-73099 Apache Juneau: Cross-site request forgery via default-enabled content query-parameter body override

Cross-Site Request Forgery CSRF vulnerability in Apache Juneau. The REST server accepts a "content" query parameter that replaces the request body, and this is enabled by default on every HTTP method, including GET. A cross-site link can therefore deliver an attacker-chosen request body to an...

CVE-2026-85346

The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform authorization or CSRF checks on several of its cloud storage media browser handlers, allowing any authenticated user with minimal permissions such as Subscriber to disclose the configuration and stored file listin...

CVE-2026-109150

The WP PageNavi Style WordPress plugin through 1.4 does not sanitise and escape some of its settings, and has no CSRF check when they are saved, which could allow attackers to make a logged-in administrator store arbitrary JavaScript via a CSRF attack that is then executed in the browser of...

CVE-2026-109150

The WP PageNavi Style WordPress plugin (versions through 1.4 ) contains a Stored XSS vulnerability caused by a lack of input sanitization, escaping, and CSRF checks when saving settings. An attacker could trick a logged-in administrator into storing arbitrary JavaScript via a CSRF attack, which w...

CVE-2026-109150 WP PageNavi Style <= 1.4 - Stored XSS via CSRF

The WP PageNavi Style WordPress plugin through 1.4 does not sanitise and escape some of its settings, and has no CSRF check when they are saved, which could allow attackers to make a logged-in administrator store arbitrary JavaScript via a CSRF attack that is then executed in the browser of...

EUVD-2026-117357

The WP PageNavi Style WordPress plugin through 1.4 does not sanitise and escape some of its settings, and has no CSRF check when they are saved, which could allow attackers to make a logged-in administrator store arbitrary JavaScript via a CSRF attack that is then executed in the browser of...

EUVD-2026-117335

The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform authorization or CSRF checks on several of its cloud storage media browser handlers, allowing any authenticated user with minimal permissions such as Subscriber to disclose the configuration and stored file listin...

PT-2026-137438

Name of the Vulnerable Software and Affected Versions Apache Juneau versions prior to 9.2.1 Description Cross-Site Request Forgery CSRF occurs because the REST server accepts a content query parameter that replaces the request body. This feature is enabled by default for all HTTP methods, includi...

CVE-2025-71454

vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrfcheck in include/utils/VteCsrf.php skips csrftoken validation for non-POST requests. Attackers can induce a logged-in user to open a crafted link sending state-changing GET requests, which handlers read fro...

EUVD-2025-211252

vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrfcheck in include/utils/VteCsrf.php skips csrftoken validation for non-POST requests. Attackers can induce a logged-in user to open a crafted link sending state-changing GET requests, which handlers read fro...

CVE-2025-71454

The software vtenext versions prior to 25.02.2 is vulnerable to a CSRF protection bypass caused by HTTP method tampering . The root cause resides in include/utils/VteCsrf.php, where the csrf_check() function fails to validate the __csrf_token for non-POST requests. An attacker can trick a logged-...

CVE-2025-71454 vtenext before 25.02.2 CSRF Protection Bypass via HTTP Method Tampering

vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrfcheck in include/utils/VteCsrf.php skips csrftoken validation for non-POST requests. Attackers can induce a logged-in user to open a crafted link sending state-changing GET requests, which handlers read fro...

CVE-2026-114456

Multiple Snowflake client drivers implementing the authenticator=externalbrowser single sign-on flow could have allowed an attacker to interfere with a user's login attempt through weaknesses in the local loopback callback listener used to receive the identity provider's response. The listener...

CVE-2026-114456 Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers

Multiple Snowflake client drivers implementing the authenticator=externalbrowser single sign-on flow could have allowed an attacker to interfere with a user's login attempt through weaknesses in the local loopback callback listener used to receive the identity provider's response. The listener...

EUVD-2026-116883

Multiple Snowflake client drivers implementing the authenticator=externalbrowser single sign-on flow could have allowed an attacker to interfere with a user's login attempt through weaknesses in the local loopback callback listener used to receive the identity provider's response. The listener...