CVE-2025-63955

CWE-352 — Cross-Site Request Forgery (CSRF)3 documents3 sources
Severity
7.5HIGH
EPSS
0.1%
top 76.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Student Record System
Timeline
PublishedNov 18

Description

A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to trick an authenticated administrator into submitting a forged request. This leads to the unauthorized deletion of user accounts, causing a Denial of Service (DoS).

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
CVE-2025-63955: A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students↗2025-11-18
▶
GHSA
GHSA-f399-h5gw-hx57: A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students↗2025-11-18
▶
CVE-2025-63955 (HIGH CVSS 7.5) | A Cross-Site Request Forgery (CSRF) | cvebase.io