https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 17:28:05 +0000 https://db.gcve.eu/vuln/cve-2026-59080 <p><strong>Affected:</strong> Edito CMS</p> <p>Edito CMS sends JWT token via GET requests. This allows a local attacker with access to browser history to obtain valid JWT token and perform action on behalf of the victim. The token is valid for only short period of time; after that time, it expires and can no longer be used.</p> <p>The vendor assessed the likelihood of exploitation as very low and determined that a fix is not necessary.</p> <p><strong>Affected:</strong> Edito CMS</p> <p>Edito CMS sends JWT token via GET requests. This allows a local attacker with access to browser history to obtain valid JWT token and perform action on behalf of the victim. The token is valid for only short period of time; after that time, it expires and can no longer be used.</p> <p>The vendor assessed the likelihood of exploitation as very low and determined that a fix is not necessary.</p> https://db.gcve.eu/vuln/cve-2026-59080