https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:50:50.288165+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-262618 EUVD-2026-262618 2026-10-06T16:50:50.333864+00:00 EUVD-2026-262618 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59112 fkie_cve-2025-59112 2026-10-06T16:50:50.333904+00:00

Windu CMS is vulnerable to Cross-Site Request Forgery in user editing functionality. Malicious attacker can craft special website, which when visited by the victim, will automatically send POST request that deletes given user.

Only version 4.1 was tested and confirmed as vulnerable. This issue was fixed in version 4.1 build 2250.

 https://cve.radiocsirt.org/vuln/ghsa-gqm6-5vm7-h5wh GHSA-gqm6-5vm7-h5wh 2026-10-06T16:50:50.333940+00:00

Windu CMS is vulnerable to Cross-Site Request Forgery in user editing functionality. Malicious attacker can craft special website, which when visited by the victim, will automatically send POST request that deletes given user.

The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 4.1 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.