Thelia Thelia Back-Office Default Twig Template
3 CVEs affecting Thelia Thelia Back-Office Default Twig Template. Latest disclosed: 2026-11-01. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-120249 | Medium | 6.5 | 2026-11-01 | Thelia Back-office Default Twig Template before 1.1.1 contains a cross-site request forgery vulnerability in the /admin/product/combinations/update and /admin/… |
CVE-2026-120206 | Medium | 5.9 | 2026-10-31 | Thelia before 3.2.0 contains a cross-site request forgery vulnerability in the back office that allows attackers to forge administrative actions because per-se… |
CVE-2026-120248 | Medium | 4.8 | 2026-11-01 | Thelia before 3.1.1 contains a stored cross-site scripting vulnerability that allows authenticated back-office administrators with store update permission to i… |