medium6.8
CVE-2025-25770
Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyUserController.java.
Impact
Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyUserController.java.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wang.Market | Wangmarket | from 4.10 through 5.0 |