CVE-2023-25968: Cozmoslabs Client Portal

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs, Madalin Ungureanu, Antohe Cristian Client Portal – Private user pages and login plugin <= 1.1.8 versions.

Affected products

• Cozmoslabs Client Portal: before 1.1.9 (fixed in 1.1.9)

Published 2023-03-15. Last modified 2026-06-17.