← Database

CVE-2025-28355

MEDIUM CVSS: 4.7 Published: 2025-04-18 Modified: 2026-06-17

Description

Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none

Affected Platforms

Personal-Management-System Personal Management System

Weakness Type

CWE-352

References