Page Module (< 2.0.4) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/page-module--2.0.4/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 31 Oct 2026 20:04:52 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgThelia Page Module: Cross-Site Request Forgery (CVE-2026-120207)https://feed.craftedsignal.io/briefs/2026-10-thelia-csrf/Sat, 31 Oct 2026 20:04:52 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-thelia-csrf/The Thelia Page Module before 2.0.4 is vulnerable to CSRF, allowing an attacker to trick a logged-in administrator into triggering unauthorized deletions of tags, documents, and images.Thelia Page Module versions prior to 2.0.4 contain a cross-site request forgery (CSRF) vulnerability in back-office delete routes. The vulnerability stems from a lack of CSRF tokens and insufficient permission checks, allowing an attacker to craft malicious GET requests that, when visited by a logged-in administrator, result in the deletion of site content. Attackers can leverage this to delete page tags, documents, and TheliaLibrary assets by iterating through sequential IDs.

Impact

Successful exploitation allows for the unauthorized deletion of site images, documents, and page tags across pages, products, and categories. This can result in significant loss of site content and broken site functionality.

Recommendation

  1. Upgrade the Thelia Page Module to version 2.0.4 or later immediately.
  2. Implement administrative session monitoring to identify anomalous administrative activity following periods of suspected phishing or social engineering.
  3. Ensure that administrative access to the Thelia back-office is restricted to trusted networks and protected by robust authentication controls to minimize exposure to CSRF triggers.
]]>highadvisory