EUVD-2026-88561

Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to delete user groups without token verification. Attackers can craft malicious links or pages that trick authenticated administrators into deleting custom groups and their associate...

CVE-2026-101093

Cotonti versions through 1.0.0 are vulnerable to a Cross-Site Request Forgery (CSRF) in the admin.users.php component. The root cause is a lack of token verification when deleting user groups. An attacker can craft malicious links or pages that trick an authenticated administrator into deleting c...

Joomla! access control error vulnerability (CNVD-2020-25676)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. An Access Control Error vulnerability exists in Joomla! versions prior to 3.9.17 that stems from an incorrect ACL check and can be exploited by an...