CVE-2025-26206

Cross Site Request Forgery vulnerability in sell done storefront v.1.0 allows a remote attacker to escalate privileges via the index.html component...

CVE-2025-26206

Cross Site Request Forgery vulnerability in sell done storefront v.1.0 allows a remote attacker to escalate privileges via the index.html component...

CVE-2025-26206

creationtimestamp| type| source ---|---|--- 2025-03-03 18:35:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6248 2025-03-03 20:49:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7bdddv2v 2025-03-03 21:24:37+00:00| seen|...

CVE-2025-26206

A Cross-Site Request Forgery (CSRF) vulnerability exists in Sell Done Storefront v.1.0 within the index.html component. The root cause is the absence of anti-CSRF tokens , which allows a remote attacker to craft malicious requests that execute privileged actions (such as changing user roles) via ...