CVE-2026-120207 Thelia Page Module before 2.0.4 CSRF via Page Tag, Document and Image Delete Routes

Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attackers to delete page tags, documents and images by abusing back-office delete routes lacking CSRF tokens and permission checks. Attackers can lure a logged-in administrator into navigating t...