https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T19:23:10.005316+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-122151 CVE-2026-122151 — Presenton User Configuration user-config JSON.parse cross-site request forgery 2026-11-05T19:23:10.014397+00:00

Affected: Presenton

A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the function JSON.parse of the file /api/user-config of the component User Configuration Handler. Such manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.12-beta is recommended to address this issue. The name of the patch is 44c8a61122b21f17642d717b0c4d6f2c54c0f180. It is recommended to upgrade the affected component.