CVE-2026-120640 | LEEJO CGI up to 4.x lib/CGI.pm param POSTDATA/PUTDATA/PATCHDATA/XForms:Model cross-site request forgery

A vulnerability was found in LEEJO CGI up to 4.x. It has been rated as problematic. This affects the function param of the file lib/CGI.pm. This manipulation of the argument POSTDATA/PUTDATA/PATCHDATA/XForms:Model causes cross-site request forgery.

This vulnerability is tracked as CVE-2026-120640. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More