CVE-2025-63710

The SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery (CSRF) due to the send_message.php endpoint lacking essential security measures such as tokens , nonces , or same-site cookie restrictions . An attacker can trick an authenticated user into visiting a malic...