3 matches found
CVE-2026-65944
CVE-2026-65944 concerns the Joomla extension rolandd.com RO CSVI, with CSRF vectors in AJAX endpoint handlers for versions prior to 9.11.0. The connected documents corroborate the issue description but do not provide exploitation details, affected components beyond the RO CSVI extension, or expli...
GHSA-GV7G-X59X-WF8F SvelteKit framework has Insufficient CSRF protection for CORS requests
Summary The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a +server.js file, containing endpoint handlers for different HTTP methods. SvelteKit provides out-of-the-box cross-site request forgery CSRF protection to its users. The protection is...
CVE-2023-29003 SvelteKit has Insufficient Cross-Site Request Forgery Protection
SvelteKit is a web development framework. The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a +server.js file, containing endpoint handlers for different HTTP methods. SvelteKit provides out-of-the-box cross-site request forgery CSRF protecti...