Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-13671 EUVD-2025-207639GHSA-fqr4-q363-g7gm

Cross Site request forgery vulnerability discovered in OpenText WSM Management Server.

Published Feb 19, 2026 · Updated Feb 24, 2026 · Assigned by OpenText

Description

Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session inside the product, click on a page that contains this malicious HTML triggering to perform changes unconsciously.

This issue affects Web Site Management Server: 16.7.0, 16.7.1.

Affected products

VendorProductAffectedFixed
OpenText™ Web Site Management Server 16.7.0, 16.7.1 —

References