Cross-Site Scripting Flaw in PHPGurukul Hostel Management System 2.1

CVE-2025-13577

What is CVE-2025-13577?

A vulnerability has been identified in PHPGurukul Hostel Management System 2.1, specifically in the handling of parameters in the /register-complaint.php file. An attacker can exploit this flaw through crafted input in the cdetails argument, potentially leading to cross-site scripting (XSS) attacks. This security lapse allows for the execution of malicious scripts in the context of the victim's browser, which could lead to session hijacking or the unauthorized access of sensitive information. It is crucial for users of the system to apply mitigations as the exploit is publicly available.

References