Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 16:23:40 +0000 CVE-2026-109319 — Grav Guestbook Plugin 0.5.0 and 0.5.1 Missing Authorization and CSRF in Moderation https://db.gcve.eu/vuln/cve-2026-109319 <p><strong>Affected:</strong> getgrav grav-plugin-guestbook</p> <p>Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll. Authenticated Admin users lacking the admin.guestbook permission, or external sites abusing a moderator&#39;s session via nonce-less GET requests, can delete or approve Guestbook entries.</p> <p><strong>Affected:</strong> getgrav grav-plugin-guestbook</p> <p>Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll. Authenticated Admin users lacking the admin.guestbook permission, or external sites abusing a moderator&#39;s session via nonce-less GET requests, can delete or approve Guestbook entries.</p> https://db.gcve.eu/vuln/cve-2026-109319