page_module vulnerabilities

CVEs whose affected-version data names the page_module package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120207High· 7.1

6d ago

Thelia Page Module before 2.0.4 CSRF via Page Tag, Document and Image Delete Routes

Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attackers to delete page tags, documents and images by abusing back-office delete routes lacking CSRF tokens and permission checks. At…

▾ TwilightThelia · Thelia Page ModuleEPSS 0.20%via CVEORG