Beveiligingsadvies

CVE-2026-9591

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-17 13:41:49

Laatst bijgewerkt 2026-06-18 13:46:21

Toegewezen door Checkmarx

CVSS-score 6.9

Status PUBLISHED

Beschrijving

Cross-site request forgery (CSRF) in NewsItemApiController in SimplCommerce prior to commit 6233d73e allows an unauthenticated remote attacker to create or modify news items as an administrator via a crafted form submitted to `/api/news-items`, due to missing anti-CSRF protection.

← Alle CVE's bekijken Bekijk op cve.org ↗