CVE-2026-19786

RosarioSIS (francoisjacquet) up to version 12.8 contains a cross-site request forgery vulnerability arising from improper handling of Modules.php. Exploitation is possible remotely after manipulating the affected processing, with user interaction required for successful abuse per the CVSS data. U...