CVE-2025-27453 — CVE-2025-27453
The HttpOnly flag is set to false on the PHPSESSION cookie. Therefore, the cookie can be accessed by other sources such as JavaScript.
Published: 2025-07-03 · CVSS: 5.3 · CVSS 3.1
The HttpOnly flag is set to false on the PHPSESSION cookie. Therefore, the cookie can be accessed by other sources such as JavaScript.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7