CVE-2012-1498: Multiple cross-site request forgery (CSRF) vulnerabilities in Webfolio CMS 1.1.4 and earlier allow remote a...

Security readout for executives and security teams

CVE-2012-1498 is a CSRF issue in Webfolio CMS 1.1.4 and earlier. If an administrator is logged in and can be tricked into making a forged request, an attacker could add an administrator account or modify a web page. Business risk depends on whether this legacy CMS is still in use. Exposure is limited to organizations still running Webfolio CMS 1.1.4 or earlier, especially where the administrative interface is reachable by administrators from normal browsing sessions. Treat as high priority if Webfolio CMS remains deployed. The main business concern is unauthorized administrator creation or website content changes through a logged-in admin. If the product is not present, no direct exposure is indicated by the bundle. Mitigation focus: Check vendor guidance for a fixed or supported Webfolio CMS release.; Retire or replace unsupported Webfolio CMS deployments where feasible.; Restrict administrative access to trusted networks or VPN users..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.