CVE-2025-15405

High · 8.8

CVSS

8.8

EPSS

0.3%

Published

Jan 1, 2026

CISA due date

—

The record

A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely.

Affected packages

Ecosystem	Package	Introduced	Fixed