CVE-2025-26206

Cross Site Request Forgery vulnerability in sell done storefront v.1.0 allows a remote attacker to escalate privileges via the index.html component...

CVE-2025-26206

Cross Site Request Forgery vulnerability in sell done storefront v.1.0 allows a remote attacker to escalate privileges via the index.html component...

CVE-2025-26206

creationtimestamp| type| source ---|---|--- 2025-03-03 18:35:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6248 2025-03-03 20:49:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7bdddv2v 2025-03-03 21:24:37+00:00| seen|...

CVE-2025-26206

CVE-2025-26206 concerns a Cross-Site Request Forgery (CSRF) vulnerability in Sell Done Storefront v1.0. The issue stems from the absence of anti-CSRF protections in the web application, allowing a remote attacker to induce privileged actions via the index.html component. Affected code is identifi...