CVE-2025-28355: Personal-Management-System Personal Management System

Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none

Affected products

• Personal-Management-System Personal Management System: version 1.4.65 only

Published 2025-04-18. Last modified 2026-06-17.