CVE-2025-13671

Vulnerability Description

Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session inside the product, click on a page that contains this malicious HTML triggering to perform changes unconsciously.

This issue affects Web Site Management Server: 16.7.0, 16.7.1.

Vulnerability Details

Published Date

February 19, 2026

Last Modified

February 24, 2026

CWE ID

CWE-352

Source

NVD

Vendor

OpenText™

Product

Web Site Management Server

External References

https://support.opentext.com/csm/en?id=ot_kb_unauthenticated&sysparm_article=KB0854846

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment