Cross-Site Scripting Vulnerability in PHPGurukul Credit Card Application Management System
CVE-2025-4939
What is CVE-2025-4939?
A cross-site scripting vulnerability exists in the PHPGurukul Credit Card Application Management System version 1.0, specifically within the /admin/new-ccapplication.php file. This vulnerability allows remote attackers to inject malicious scripts that could be executed by unsuspecting users visiting the application. The aim of such attacks generally involves compromising user accounts, stealing session cookies, or redirecting users to malicious sites. The details of this flaw have been publicly disclosed, which raises concerns about the potential for widespread exploitation.
Affected Version(s)
Credit Card Application Management System 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved