Security Advisory

CVE-2025-25967

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-03 00:00:00

Last updated 2025-03-04 16:49:06

Assigner mitre

State PUBLISHED

Description

Acora CMS version 10.1.1 is vulnerable to Cross-Site Request Forgery (CSRF). This flaw enables attackers to trick authenticated users into performing unauthorized actions, such as account deletion or user creation, by embedding malicious requests in external content. The lack of CSRF protections allows exploitation via crafted requests.

← Browse all CVEs View on cve.org ↗