CVSS 3.1
7.3 highCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:LCVE-2025-56710
High (7.3) in phpgurukul student result management system. EPSS 0.2% chance of exploitation in the next 30 days.
A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Using-PHP-V2.0. This flaw allows an attacker to trick authenticated users into unintentionally modifying their account details. By crafting a malicious HTML page, an attacker can submit unauthorized requests to the vulnerable endpoint: /create-class.php.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-11-01)
- CWE
- CWE-352
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phpgurukul:student_result_management_system