Medium severity6.5NVD Advisory· Published May 24, 2021· Updated Jun 17, 2026

CVE-2020-25408

Description

A Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

College Management System Project/College Management System
cpe:2.3:a:college_management_system_project:college_management_system:1.0:*:*:*:*:*:*:*
ProjectWorlds/College Management System Phpdescription
Projectworlds/Assets-management-system-in-phpllm-fuzzy
Range: 1.0

Patches

Vulnerability mechanics

References

nikhilkumar01.medium.com/cve-2020-25408-97eb7bcc23a6nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000