CVE-2026-78280

Hash Form versions up to 1.4.0 are vulnerable to an unauthenticated Cross Site Request Forgery (CSRF) attack, which could allow an attacker to perform unauthorized actions on behalf of users without their consent. This vulnerability poses a medium risk, particularly for applications that rely on Hash Form for user authentication or sensitive operations. Organizations utilizing this software should prioritize patching to mitigate potential exploitation risks.