CVE-2017-11680: Project Hashtopussy Hashtopussy

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) exists in Hashtopussy 0.4.0, allowing an admin password change via users.php.

Affected products

• Project Hashtopussy Hashtopussy: up to and including 0.4.0

Published 2017-07-27. Last modified 2026-06-17.