CVE-2021-26800: User Management System In PHP Stored Procedure Project User Management System In PHP Stored Procedure

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Cross Site Request Forgery (CSRF) vulnerability in Change-password.php in phpgurukul user management system in php using stored procedure V1.0, allows attackers to change the password to an arbitrary account.

Affected products

Published 2021-12-16. Last modified 2026-06-17.