CVE-2025-29722

Description

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints.

References

https://github.com/yassmittal/Commercify

https://github.com/cypherdavy/CVE-2025-29722

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS