webriti vdperanto: Cross-Site Request Forgery (CVE-2026-125847)

A Cross-Site Request Forgery (CSRF) vulnerability exists in the webriti vdperanto plugin. This vulnerability, tracked as CVE-2026-125847, allows an attacker to perform unauthorized actions on behalf of an authenticated user if the user is enticed to visit a malicious site or interact with a crafted link. This issue affects all versions of vdperanto from n/a through 2.2. No information regarding a patch or remediation version is currently available.

Impact

An attacker can trigger unauthorized actions within the webriti vdperanto application, potentially leading to administrative configuration changes or unauthorized data modification if an authenticated user interacts with the exploit payload.

Recommendation

• Audit the installation of webriti vdperanto to determine if it is in use.
• Monitor logs for unusual administrative actions originating from end-user sessions.
• If a patch becomes available from the vendor, prioritize testing and deployment in all environments using the plugin.