CVE-2025-50586

5th percentile - higher than 5% of all known CVEs

StudentManage v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability. This allows an attacker to perform unauthorized actions on behalf of an authenticated user.

The risk is that an attacker can execute unwanted operations (e.g., data modification, account creation) without the victim's knowledge, potentially compromising data integrity and authorization.

Implement CSRF protection mechanisms such as synchronization tokens (CSRF tokens) in forms and requests, and validate the Origin or Referer header.