Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Thelia
Smarty Module
Thelia Smarty Module vulnerabilities
Any severity
Critical
High or worse
Medium or worse
Low or worse
Any EPSS
EPSS 10% or more
EPSS 50% or more
EPSS 90% or more
Known exploited
In KEV
Public exploit
Fix available
Apply
thelia
,
thelia
back-office default template
,
back-office default twig template
+2 more
+4 more
Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actions
CVE-2026-120206
5.9
Medium
October 31, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open