CVE-2026-116210 — Webasyst Framework through 4.4.0 Photos App CSRF via Backend Actions

Webasyst Framework through 4.4.0 contains a cross-site request forgery (CSRF) vulnerability in the Photos app. The app does not enable the framework's opt-in CSRF check, allowing remote attackers to cause logged-in Photos users to submit forged POST requests from a malicious page.