CVE-2026-13724
Medium · 4.3CVSS
4.3
EPSS
0.3%
Published
Jul 20, 2026
CISA due date
—
The record
Client-Side Enforcement of Server-Side Security vulnerability in Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co. Corporate Training Management System allows Input Data Manipulation. This issue affects Corporate Training Management System: before dd1a9df64.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-117554 Admidio before 5.0.17 contains an improper access control vulnerability that allows… CWE-602
- CVE-2026-116605 A vulnerability was found in SourceCodester Online Food Ordering System 1.0. CWE-602
- CVE-2026-89175 Smart Video Intercom System developed by Kingdom Communication Associated has a… CWE-602
- CVE-2026-77999 Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to… CWE-602
- CVE-2026-84841 A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. CWE-602
- CVE-2026-77793 The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate the total price… CWE-602
- CVE-2026-84110 A vulnerability was detected in Releasit Releasit COD Form & Upsells v1. CWE-602
- CVE-2026-77026 Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms… CWE-602