CVE-2025-6352: code-projects Automated Voting System Backend vote.php direct request

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-06-20 · updated 2026-06-17
Weakness: CWE-425

Description

A vulnerability classified as problematic has been found in code-projects Automated Voting System 1.0. Affected is an unknown function of the file /vote.php of the component Backend. The manipulation leads to direct request. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

code-projects Automated Voting System: 1.0

References

https://code-projects.org/
https://github.com/asd1238525/cve/blob/main/Unauthorized.md
https://vuldb.com/?ctiid.313344
https://vuldb.com/?id.313344
https://vuldb.com/?submit.597239
https://github.com/asd1238525/cve/blob/main/Unauthorized.md

Get alerted when CVE-2025-6352 or the next vulnerability affects your stack