agentprime: thelia-coreEvery new CVE for thelia-core.https://agentprime.io/CVE-2026-120248: Thelia before 3.1.1 Stored XSS via SVG Store Logo and Banner Uploadshttps://agentprime.io/advisories/CVE-2026-120248/https://agentprime.io/advisories/CVE-2026-120248/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 00:57:12 GMTCVECVE-2026-120206: Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actionshttps://agentprime.io/advisories/CVE-2026-120206/https://agentprime.io/advisories/CVE-2026-120206/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 17:25:54 GMTCVECVE-2026-120205: Thelia before 3.1.0 Stored XSS via Coupon Condition Customer Namehttps://agentprime.io/advisories/CVE-2026-120205/https://agentprime.io/advisories/CVE-2026-120205/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 17:25:53 GMTCVE