CVE-2024-55271

The phpgurukul Gym Management System 1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to the absence of Anti-CSRF tokens . This flaw specifically affects the /profile.php endpoint within the User Panel's profile update functionality. An attacker can exploit this vulnerability t...