CVE-2026-6710

Name of the Vulnerable Software and Affected Versions Skysa Text Ticker App versions prior to 1.5

Description Cross-Site Request Forgery occurs due to missing or incorrect nonce validation in the SkysaApps Admin AppPage() function. A nonce is a unique token used to prevent the replay of requests. This flaw allows unauthenticated attackers to trick a site administrator into executing a forged request, enabling the unauthorized modification of plugin settings, such as the scrolling message text and URL.

Recommendations Update to a version later than 1.4.