CVE-2025-28062

This repository contains a working proof-of-concept for CVE-2025-28062, demonstrating CSRF vulnerabilities in ERPNext versions 14.82.1 and 14.74.3 that allow account takeover, user deletion, and privilege escalation.

The exploit demonstrates a CSRF vulnerability in ERPNext versions <= 14.82.1 and 14.74.3, allowing account takeover via unauthorized state-changing operations such as user deletion, role assignment, and password reset. The PoC includes functional HTML snippets targeting specific API endpoints without CSRF protection.