CVE-2025-48340
Severity CVSS v4.0:
Pending analysis
Type:
CWE-352
Cross-Site Request Forgery (CSRF)
Publication date:
19/05/2025
Last modified:
21/05/2025
Description
Cross-Site Request Forgery (CSRF) vulnerability in Danny Vink User Profile Meta Manager allows Privilege Escalation.This issue affects User Profile Meta Manager: from n/a through 1.02.
Impact
Base Score 3.x
9.80
Severity 3.x
CRITICAL