Cross Site Scripting in Phpgurukul Maid Hiring Management System
CVE-2025-50363

5.4MEDIUM

Key Information:

Vendor

Phpgurukul
Status
Maid Hiring Management System
Vendor
CVE Published:
3 November 2025

What is CVE-2025-50363?

The Phpgurukul Maid Hiring Management System version 1.0 contains a Cross Site Scripting (XSS) vulnerability located in the '/maid-hiring.php' file. This vulnerability arises from improper handling of user-supplied input in the name field, potentially allowing attackers to inject malicious scripts. Successful exploitation could lead to unauthorized access to user sessions, data theft, or a range of other malicious activities.

References

https://github.com/1h3ll/BXSS_CVE
https://github.com/Adar5h16/My-CVE/blob/main/CVE-2025-503...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-50363 : Cross Site Scripting in Phpgurukul Maid Hiring Management System