5 matches found
CVE-2026-65944
The Joomla Extension - rolandd.com is vulnerable to Cross-Site Request Forgery (CSRF) vectors within its AJAX endpoint handlers . This issue affects versions of RO CSVI prior to 9.11.0 . The vulnerability allows for unauthorized actions to be performed by a victim's browser. Specific exploitation...
CVE-2026-65946: Improper Neutralization of Input During Web Page Generation
Joomla Extension - rolandd.com - XSS vectors in AJAX endpoint handlers RO CSVI 9.11.0...
CVE-2026-65944: Cross-Site Request Forgery (CSRF)
Joomla Extension - rolandd.com - CSRF vectors in AJAX endpoint handlers RO CSVI 9.11.0...
GHSA-GV7G-X59X-WF8F SvelteKit framework has Insufficient CSRF protection for CORS requests
Summary The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a +server.js file, containing endpoint handlers for different HTTP methods. SvelteKit provides out-of-the-box cross-site request forgery CSRF protection to its users. The protection is...
CVE-2023-29003 SvelteKit has Insufficient Cross-Site Request Forgery Protection
SvelteKit is a web development framework. The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a +server.js file, containing endpoint handlers for different HTTP methods. SvelteKit provides out-of-the-box cross-site request forgery CSRF protecti...