Medium severity4.3NVD Advisory· Published Apr 28, 2025· Updated Jun 17, 2026

CVE-2025-3997

Description

A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3. This affects an unknown part of the file /index.php?my-profile-ajax-1 of the component Personal Information Page. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

dazhouda/lecmsllm-fuzzy
Range: =3.0.3

Patches

Vulnerability mechanics

References

github.com/dtwin88/cve-md/blob/main/lecms%20V3.0.3/lecms_4.mdnvd
vuldb.comnvd
vuldb.comnvd
vuldb.comnvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000