CVE-2025-5185

MEDIUM

Summer Pearl Group Vacation Rental Management Platform <1.0.1 - CSRF

Title source: llm

Description

A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. Upgrading to version 1.0.2 is able to address this issue. It is recommended to upgrade the affected component.

References (3)

Scores

CVSS v3 4.3
EPSS 0.0002
EPSS Percentile 5.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Classification

CWE
CWE-862 CWE-352
Status draft

Timeline

Published May 26, 2025
Tracked Since Feb 18, 2026