CVE-2025-26931
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2025-26931 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Tribulant Software's Tribulant Gallery Voting. An attacker can exploit this issue to inject Stored Cross-Site Scripting (XSS) attacks on unsuspecting users. Successful exploitation allows the attacker to execute malicious scripts in the context of the target, potentially leading to session hijacking or data theft. This vulnerability affects Tribulant Gallery Voting versions from n/a through 1.2.1. Users are advised to upgrade to a patched version as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.