CVE-2025-26206

Description

Cross Site Request Forgery vulnerability in sell done storefront v.1.0 allows a remote attacker to escalate privileges via the index.html component

Affected Platforms

Weakness Type

CWE-352

References

• https://github.com/selldone/storefront/blob/main/index.html
• https://github.com/xibhi/CVE-2025-26206