CVE-2025-29722
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints.
CVSS 3.1 · 6.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products