CVE-2025-67315

Name of the Vulnerable Software and Affected Versions Employee Leave Management System version 2.1

Description A Cross Site Request Forgery issue exists in Employee Leave Management System version 2.1. This allows a remote attacker to escalate privileges through the manage-employee.php component. The attack exploits a lack of proper request validation, potentially allowing an attacker to perform actions on behalf of an authenticated user without their knowledge.

Recommendations Employee Leave Management System version 2.1 should be updated to a version with appropriate CSRF protections. As a temporary workaround, consider implementing additional validation checks on all requests to the manage-employee.php component.