
Volmarg/personal-management-system
Releases90
Frequency3 weeks 6 days
Last Release
Stars4.03K
Your web application for managing personal data. [email protected]
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 4.7 MEDIUM | — | ||
Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none | |||
| 7.8 HIGH | — | ||
An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar. | |||