CVE-2024-55271

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0

Low · published February 17, 2026

CVSS v3.1
3.5
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00154 · 4.2th percentile
Published
2026-02-17T00:00Z
EPSS history
Timeline
  • 17 FEB 00:00Z
    A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0
    cvelistv5