# 🚨 CVE-2025-26206: Cross-Site Request Forgery (CSRF) in Sell Done Storefront v.1.0
Welcome to the official repository documenting the discovery and details of **CVE-2025-26206**, a critical **Cross-Site Request Forgery (CSRF)** vulnerability in **Sell Done Storefront v.1.0**. Discovered by **B. Sibhi**, this vulnerability highlights the importance of robust web application security practices.
---
## 📄 Overview
This repository provides a detailed breakdown of the **CSRF vulnerability** identified in **Sell Done Storefront v.1.0**, which has been assigned the CVE ID **CVE-2025-26206**. The vulnerability allows a remote attacker to escalate privileges by exploiting the lack of CSRF protections in the application.
---
## 🔍 Vulnerability Details
| **Category** | **Details** |
|-----------------------|-----------------------------------------------------------------------------|
| **CVE ID** | [CVE-2025-26206](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26206) |
| **Vulnerability Type**| Cross-Site Request Forgery (CSRF) |
| **Affected Product** | Sell Done Storefront v.1.0 |
| **Impact** | Privilege Escalation |
| **Attack Vector** | Remote |
| **Discoverer** | [B. Sibhi](https://github.com/xibhi) |
---
## 🛠️ Technical Description
The vulnerability exists due to the absence of **anti-CSRF tokens** in the Sell Done Storefront v.1.0 web application. This allows an attacker to craft malicious requests that can be executed by an authenticated user without their knowledge, leading to **privilege escalation**.
### Affected Code
The vulnerable code is located in the following file:
- [`index.html`](https://github.com/selldone/storefront/blob/main/index.html)
### How It Works
1. An attacker creates a malicious HTML form or script designed to perform a privileged action (e.g., changing user roles).
2. The attacker tricks an authenticated user into visiting a page containing the malicious form/script.
3. The user’s browser sends a request to the vulnerable application, executing the privileged action without the user’s consent.
---
## ⚠️ Impact
If exploited, this vulnerability could allow a remote attacker to:
- Escalate privileges and gain unauthorized access to sensitive functionalities.
- Perform actions on behalf of authenticated users without their knowledge.
---
## 🛡️ Remediation
The vendor has been notified, and the issue has been patched. To mitigate this vulnerability:
1. **Update** to the latest version of Sell Done Storefront.
2. **Implement anti-CSRF tokens** in all state-changing requests.
3. **Validate and sanitize** all user inputs to prevent similar vulnerabilities.
---
## 📚 References
- [CVE Mitre Entry](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26206)
- [Sell Done Storefront GitHub Repository](https://github.com/selldone/storefront)
- [OWASP CSRF Prevention Cheat Sheet](https://owasp.org/www-community/attacks/csrf)
---
## 📜 License
This repository is licensed under the [MIT License](LICENSE). Feel free to use the information provided here for educational or research purposes.
---
**Disclaimer**: This repository is intended for educational and informational purposes only. The discoverer is not responsible for any misuse of the information provided.3. The user's browser sends a request to the vulnerable application, executing the privileged action without the user's knowledge.
**Note**: A full PoC is not provided here to prevent misuse. Responsible disclosure practices have been followed.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view