Skip to content

CVE record · 1 source

CVE-2026-120207

CVSS 7.1

Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attackers to delete page tags, documents and…

Vendor: Thelia
Product: Thelia Page Module
CVSS v3.1: 7.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L
Weakness: CWE-352

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

CVE NVD 14h ago

Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attackers to delete page tags, documents and…

Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attackers to delete page tags, documents and images by abusing back-office delete routes lacking CSRF tokens and permission…

CVSS 7.1 CVE-2026-120207 Thelia