CVE-2022-30931

Name of the Vulnerable Software and Affected Versions Employee Leaves Management System (ELMS) version 2.1

Description The issue is related to Cross Site Request Forgery (CSRF) via the "/myprofile.php" API endpoint. This means an attacker could potentially trick a user into performing unintended actions on the system.

Recommendations For Employee Leaves Management System (ELMS) version 2.1, consider implementing proper CSRF token validation to prevent unauthorized requests to the "/myprofile.php" endpoint. As a temporary workaround, restrict access to the "/myprofile.php" endpoint until a patch is available.