PT-2026-4371
CVE-2026-24521
·
Published
2026-01-23
·
Updated
2026-01-26
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Kama Thumbnail versions through 3.5.1
Description
A Cross-Site Request Forgery (CSRF) issue exists in Kama Thumbnail. This allows an attacker to potentially perform actions on behalf of an authenticated user without their knowledge.
Recommendations
Update Kama Thumbnail to a version newer than 3.5.1.
Found an issue in the description? Have something to add? Feel free to write us 👾