CVE-2026-116210

Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos app that allows remote attackers to perform backend actions because the app does not enable the framework's opt-in CSRF check. Attackers can lure logged-in Photos users to a malicious page that...

CVE-2026-116210

The Webasyst Framework (through version 4.4.0 ) contains a cross-site request forgery (CSRF) vulnerability in its Photos app . The root cause is that the app fails to enable the framework's opt-in CSRF check. This allows remote attackers to lure authenticated users to a malicious page that submit...

EUVD-2026-109803

Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos app that allows remote attackers to perform backend actions because the app does not enable the framework's opt-in CSRF check. Attackers can lure logged-in Photos users to a malicious page that...