Filtered by vendor Sourcecodester Subscriptions
Filtered by product Product Expiry Management System Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-63712 1 Sourcecodester 1 Product Expiry Management System 2025-11-12 N/A
Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management module (delete-user.php) allows remote attackers to delete arbitrary user accounts via forged cross-origin GET requests because the endpoint relies solely on session cookies and lacks CSRF protection.