CVE-2025-63955: phpgurukul student_record_system Cross-Site Request Forgery (CSRF)

Vulnerability summary

CVE-2025-63955 is a high (CVSS 7.5) Cross-Site Request Forgery (CSRF) vulnerability in phpgurukul student_record_system. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 14.7% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 18-11-2025
   PublishedVulnerability first disclosed.
2. 18-11-2025
   Last modifiedVulnerability information updated.

Description

A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to trick an authenticated administrator into submitting a forged request. This leads to the unauthorized deletion of user accounts, causing a Denial of Service (DoS).

• CWE-352Cross-Site Request Forgery (CSRF)The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.