CVE-2025-26206

Sell Done Storefront v.1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in the index.html component. The root cause is the absence of anti-CSRF tokens , allowing a remote attacker to trick an authenticated user into performing privileged actions, such as changing user roles. This can...