CVE-2025-22963

Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin...

PT-2024-31944 · Teedy · Teedy

Name of the Vulnerable Software and Affected Versions: Teedy version 1.11 Description: The issue is related to Cross Site Scripting XSS via the management console. This allows for potential account takeover. Recommendations: For Teedy version 1.11, as a temporary workaround, consider restricting...