Skip to content
OpenAdvisories

Product · Telepedia

TableProgressTracking

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.5
    CVE-2025-67646

    TableProgressTracking's missing CSRF protection allows unauthorized state changes

    TableProgressTracking is a MediaWiki extension to track progress against specific criterion. Versions 1.2.0 and below do not enforce CSRF token validation in the REST API. As a result, an attacker could craft a malicious webpage that, when visited by an authe…

    Telepedia TableProgressTracking