[CRITICAL] OpenSTAManager affected by unauthenticated privilege escalation via modules/utenti/actions.php

PKSA-gkxr-gfn8-3tk2 CVE-2026-27012 GHSA-247v-7cw6-q57v

Affected package: devcode-it/openstamanager

Affected version: <=2.9.8

Reported by:
GitHub