Vulnerability Description
A vulnerability, which was classified as problematic, was found in withstars Books-Management-System 1.0. Affected is an unknown function of the file /api/article/del of the component Article Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Withstars | Books-Management-System | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/caigo8/CVE-md/blob/main/Blog-System/CSRF.mdExploit
- https://vuldb.com/?ctiid.306300Permissions RequiredVDB Entry
- https://vuldb.com/?id.306300Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.557239Third Party AdvisoryVDB Entry
- https://github.com/caigo8/CVE-md/blob/main/Blog-System/CSRF.mdExploit
FAQ
What is CVE-2025-3964?
CVE-2025-3964 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A vulnerability, which was classified as problematic, was found in withstars Books-Management-System 1.0. Affected is an unknown function of the file /api/article/del of the component Article Handler....
How severe is CVE-2025-3964?
CVE-2025-3964 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-3964?
Check the references section above for vendor advisories and patch information. Affected products include: Withstars Books-Management-System.