Dashboard / CVE-2025-61547

CVE-2025-61547

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 54/100
Published: 2026-01-08 Modified: 2026-11-04 First seen: 2026-11-04 Status: active

Attack Surface

Network No Auth Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: Required
S: Unchanged
C: High
I: High
A: None

Description

Cross-Site Request Forgery (CSRF) is present on all functions in edu Business Solutions Print Shop Pro WebDesk version 18.34 (fixed in 19.76). The application does not implement proper CSRF tokens or other other protective measures, allowing a remote attacker to trick authenticated users into unknowingly executing unintended actions within their session. This can lead to unauthorized data modification such as credential updates.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
edubusinesssolutions print_shop_pro_webdesk 18.34

References & Advisories (1)

Bug Bounty Relevance

54 / 100
✓ Network accessible
✓ No authentication

CVSS Score

6.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

EPSS — Exploitation Probability

0.18%
Raw Score 0.001800
Percentile 7.7%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00180
2026-11-12
0.00180
2026-11-10
0.00180
2026-11-09
0.00180
2026-11-08
0.00180
2026-11-07
0.00180
2026-11-06
0.00180
2026-11-05
0.00180
2026-11-04
0.00180

Intelligence Sources

nvd ref →

External Links