CVE-2012-1498

CVE-2012-1498 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Webfolio CMS version 1.1.4 and earlier. These flaws allow unauthenticated remote attackers to hijack administrator sessions, enabling actions such as adding new administrators or modifying existing web pages. With a CVSS score of 6.8, this vulnerability is considered medium severity, requiring user interaction (AC:M) but potentially leading to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). While not listed in CISA's KEV catalog, public exploit code exists via ExploitDB, though there is no evidence of active exploitation or significant community discussion.