CVE-2025-28355

PoC —

CVSS 3.1

4.7 medium

EPSS

<1%p12

Published

Apr 18, 2025 (Apr 18, 2025)

Modified

Jun 17, 2026

Description

Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none

Vendors: personal-management-system
Products: personal management system
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.