Cross Site Scripting Vulnerability in PHPGurukul COVID19 Testing Management System

CVE-2025-6287

What is CVE-2025-6287?

A vulnerability has been identified in the PHPGurukul COVID19 Testing Management System 1.0, specifically within the /test-details.php file of the Take Action component. This issue arises from improper handling of user input in the remark argument, which can be manipulated to execute cross site scripting (XSS) attacks. Since this vulnerability can be exploited remotely, it poses significant risks, particularly as the exploit details have been publicly disclosed. This can allow attackers to inject malicious scripts into pages viewed by other users, potentially compromising user data and security.

References