CVE-2025-63611 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php ar…
High CVSS: 8.7

CVE-2025-63611

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer (/admin/complaint-details.php?cid=<id>). When an administrator opens the complaint, injected HTML/JavaScript executes in the admin's browser.
Vendor
Phpgurukul
Product
Hostel Management System
CWE
CWE-79
Yayın Tarihi
2026-01-08 16:15:45
Güncelleme
2026-01-12 18:45:23
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-79 Hostel Management System HIGH Phpgurukul 2026

Referanslar

https://medium.com/@tanushkushtk01/cve-2025-63611-stored-cross-site-scripting-xss-in-hostel-management-system-v2-1-a23c2efc86ea https://phpgurukul.com/hostel-management-system/