CVE-2020-25408

Name of the Vulnerable Software and Affected Versions: ProjectWorlds College Management System Php version 1.0

Description: A Cross-Site Request Forgery (CSRF) issue exists, allowing a remote attacker to modify, delete, or create new entries for student, faculty, teacher, subject, scores, location, and article data.

Recommendations: For ProjectWorlds College Management System Php version 1.0, consider implementing proper CSRF token validation to prevent unauthorized requests. As a temporary workaround, restrict access to sensitive data modification endpoints to minimize the risk of exploitation.