CVE-2025-44186

medium

Description

SourceCodester Best Employee Management System 1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/Operation/User.php page.

References

https://github.com/cumakurt/CVE-SourceCodester-Best-Employee-Management-System-1.0

https://www.sourcecodester.com/php/17689/best-employee-management-system-php.html

https://github.com/cumakurt/CVE-SourceCodester-Best-Employee-Management-System-1.0/blob/main/CVE-2025-44186-SourceCodester-Best-Employee-Management-System-1.0-CSRF-in-User-Update.md

Details

Source: Mitre, NVD

Published: 2025-05-14

Updated: 2025-05-27

Risk Information

CVSS v2

Base Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 5.4

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Severity: Medium

EPSS

EPSS: 0.00018