CVE-2025-26206

Cross Site Request Forgery vulnerability in sell done storefront v.1.0 allows a remote attacker to escalate privileges via the index.html component...

CVE-2025-26206

Cross Site Request Forgery vulnerability in sell done storefront v.1.0 allows a remote attacker to escalate privileges via the index.html component...

CVE-2025-26206

creationtimestamp| type| source ---|---|--- 2025-03-03 18:35:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6248 2025-03-03 20:49:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7bdddv2v 2025-03-03 21:24:37+00:00| seen|...

CVE-2025-26206

Sell Done Storefront v.1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in the index.html component. The root cause is the absence of anti-CSRF tokens , allowing a remote attacker to trick an authenticated user into performing privileged actions, such as changing user roles. This can...