CVE-2025-29722

Published April 17th, 2025

View on NVD ↗

CVSS v3

6.3

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints.

cypherdavy/CVE-2025-29722

Cross Site Request Forgery (CSRF) in Commercify v1.0

GitHub

yassmittal/Commercify

An e-commerce website made with ready and tailwind for react beginners

GitHub