CVE-2010-3026

CVE-2010-3026 describes a Cross-Site Request Forgery (CSRF) vulnerability in Tomaz Muraus Open Blog 1.2.1 and potentially earlier versions. This flaw allows remote attackers to hijack an administrator's authenticated session to grant administrative privileges via requests to the admin/users/edit function. With a CVSS score of 4.3 (Medium), this vulnerability has a network attack vector and medium attack complexity, potentially leading to unauthorized privilege escalation. While not listed on the KEV catalog, an exploit (EDB-14562) is publicly available, though there is no evidence of active exploitation or significant community discussion.