← Database

CVE-2025-13671

MEDIUM CVSS: 6.5 Published: 2026-02-19 Modified: 2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session inside the product, click on a page that contains this malicious HTML triggering to perform changes unconsciously. This issue affects Web Site Management Server: 16.7.0, 16.7.1.

Affected Platforms

Opentext Web Site Management Server

Weakness Type

CWE-352

References