CVE-2018-25186 - Tina4 Stack 1.0.3 Cross-Site Request Forgery via profile

CVE ID : CVE-2018-25186 Published : March 6, 2026, 12:19 p.m. | 39 minutes ago Description : Tina4 Stack 1.0.3 contains a cross-site request forgery vulnerability that allows attackers to modify admin user credentials by submitting forged POST requests to the profile endpoint. Attackers can craft HTML forms targeting the /kim/profile endpoint with hidden fields containing malicious user data like passwords and email addresses to update administrator accounts without authentication. Severity: 6.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...