https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 17:16:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-220421 EUVD-2026-220421 https://cve.radiocsirt.org/vuln/euvd-2026-220421 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25967 <p>Acora CMS version 10.1.1 is vulnerable to Cross-Site Request Forgery (CSRF). This flaw enables attackers to trick authenticated users into performing unauthorized actions, such as account deletion or user creation, by embedding malicious requests in external content. The lack of CSRF protections allows exploitation via crafted requests.</p> <p>Acora CMS version 10.1.1 is vulnerable to Cross-Site Request Forgery (CSRF). This flaw enables attackers to trick authenticated users into performing unauthorized actions, such as account deletion or user creation, by embedding malicious requests in external content. The lack of CSRF protections allows exploitation via crafted requests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-25967 https://cve.radiocsirt.org/vuln/ghsa-6pg6-qhjj-4wcm <p>Acora CMS version 10.1.1 is vulnerable to Cross-Site Request Forgery (CSRF). This flaw enables attackers to trick authenticated users into performing unauthorized actions, such as account deletion or user creation, by embedding malicious requests in external content. The lack of CSRF protections allows exploitation via crafted requests.</p> <p>Acora CMS version 10.1.1 is vulnerable to Cross-Site Request Forgery (CSRF). This flaw enables attackers to trick authenticated users into performing unauthorized actions, such as account deletion or user creation, by embedding malicious requests in external content. The lack of CSRF protections allows exploitation via crafted requests.</p> https://cve.radiocsirt.org/vuln/ghsa-6pg6-qhjj-4wcm