VYPR

Photos

by Shop Script

CVEs (1)

  • CVE-2026-116210MedOct 26, 2026
    risk 0.42cvss 6.5epss 0.00

    Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos app that allows remote attackers to perform backend actions because the app does not enable the framework's opt-in CSRF check. Attackers can lure logged-in Photos users to a…