CVE-2025-28355

Published Apr 18, 2025·Updated Jun 17, 2026

NVD Description

Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none

Public Exploits & PoCs1 found

PoC: CVE-2025-28355

It was identified that the https://github.com/Volmarg/personal-management-system application is vulnerable to CSRF attacks.

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free