https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-27T06:37:40.071463+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-116210 CVE-2026-116210 — Webasyst Framework through 4.4.0 Photos App CSRF via Backend Actions 2026-10-27T06:37:40.074783+00:00

Affected: Webasyst Framework

Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos app that allows remote attackers to perform backend actions because the app does not enable the framework's opt-in CSRF check. Attackers can lure logged-in Photos users to a malicious page that submits forged POST requests to photo/delete, album/save, photo/manageAccessSave or photo/saveField, deleting photos and changing access rights.