CVE-2026-122151 | Presenton up to 0.9.11-beta User Configuration /api/user-config JSON.parse cross-site request forgery (Issue 975)

A vulnerability was found in Presenton up to 0.9.11-beta. It has been declared as problematic. Impacted is the function JSON.parse of the file /api/user-config of the component User Configuration Handler. Such manipulation leads to cross-site request forgery.

This vulnerability is referenced as CVE-2026-122151. It is possible to launch the attack remotely. Furthermore, an exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More