CVE-2026-119484

Name of the Vulnerable Software and Affected Versions Photo Gallery by Supsystic versions prior to 1.21.7

Description Cross-Site Request Forgery (CSRF) occurs when an attacker tricks a site administrator into performing an unauthorized action via a forged request. This is caused by missing or incorrect nonce validation on a function, where a nonce is a unique token used to verify that a request was intentionally sent by the user.

Recommendations Update to a version newer than 1.21.6.