CVE-2025-63712

Name of the Vulnerable Software and Affected Versions SourceCodester Product Expiry Management System (affected versions not specified)

Description The software contains a Cross-Site Request Forgery (CSRF) issue within the User Management module. Specifically, the delete-user.php endpoint is susceptible to unauthorized deletion of user accounts through forged cross-origin GET requests. The endpoint relies on session cookies for authentication and lacks CSRF protection. The delete-user.php endpoint is vulnerable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.