Spasalon - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/spasalon/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 16:14:29 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgWebriti Spasalon: Cross-Site Request Forgery (CVE-2026-125843)https://feed.craftedsignal.io/briefs/2026-11-webriti-spasalon-csrf-cve-2026-125843/Wed, 11 Nov 2026 16:14:29 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-webriti-spasalon-csrf-cve-2026-125843/The Webriti Spasalon plugin is affected by a Cross-Site Request Forgery (CSRF) vulnerability.The Webriti Spasalon plugin contains a Cross-Site Request Forgery (CSRF) vulnerability, identified as CVE-2026-125843. This issue affects Spasalon from n/a through 3.0.

Impact

This vulnerability carries a CVSS v3.1 base score of 8.8.

]]>highadvisory