CVE-2025-13671: Opentext Web Site Management Server

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session inside the product, click on a page that contains this malicious HTML triggering to perform changes unconsciously. This issue affects Web Site Management Server: 16.7.0, 16.7.1.

Affected products

• Opentext Web Site Management Server: version 16.7.0 only; version 16.7.1 only

Published 2026-02-19. Last modified 2026-06-17.