Security Advisory

CVE-2025-56710

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-09-15 00:00:00
Last updated 2025-09-15 14:07:16
Assigner mitre
State PUBLISHED

Description

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Using-PHP-V2.0. This flaw allows an attacker to trick authenticated users into unintentionally modifying their account details. By crafting a malicious HTML page, an attacker can submit unauthorized requests to the vulnerable endpoint: /create-class.php.