CVE-2025-63955: CSRF

Published Nov 18, 2025

Updated

A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to trick an authenticated administrator into submitting a forged request. This leads to the unauthorized deletion of user accounts, causing a Denial of Service (DoS).

Affected Software

2 affected components

Phpgurukul Student Record System

Phpgurukul Student Record System=3.2

Event History

Nov 18, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-63955?

CVE-2025-63955 is classified as a high-severity vulnerability due to its potential for unauthorized account deletion.

How do I fix CVE-2025-63955?

To fix CVE-2025-63955, implement anti-CSRF tokens in the manage-students.php component to validate submitted requests.

Who is affected by CVE-2025-63955?

CVE-2025-63955 affects users of PHPGurukul Student Record System version 3.2.

What type of vulnerability is CVE-2025-63955?

CVE-2025-63955 is a Cross-Site Request Forgery (CSRF) vulnerability.

What can attackers do with CVE-2025-63955?

Attackers can leverage CVE-2025-63955 to trick authenticated administrators into performing unauthorized actions, such as deleting user accounts.