CVE-2025-26206

Summary

CVE-2025-26206 is a Cross-Site Request Forgery (CSRF) vulnerability discovered in sell done storefront version 1.0. An attacker can exploit this weakness to manipulate a user's session unknowingly, allowing them to escalate privileges by crafting malicious requests via the index.html component. This issue can lead to unauthorized actions, potential data theft or unintended modifications, posing a significant threat to users of the affected storefront. It is recommended that users immediately update to the latest version of the software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.