5.9
Medium
CVE-2025-13671 Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request…
Description
Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session inside the product, click on a page that contains this malicious HTML triggering to perform changes unconsciously. This issue affects Web Site Management Server: 16.7.0, 16.7.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Web Site Management Server 16.7 | 16.7.0 → 16.7.1 | No fix stated |