Cross Site Scripting Vulnerability in PHPGurukul Apartment Visitors Management System

CVE-2025-7858

What is CVE-2025-7858?

A cross site scripting vulnerability has been identified in version 1.0 of the PHPGurukul Apartment Visitors Management System. It resides within the /admin-profile.php file, specifically affecting the HTTP POST Request Handler. Attackers can manipulate the 'adminname' parameter to execute scripts in the context of the user's browser, potentially leading to unauthorized actions and data exposure. This vulnerability can be exploited remotely, and its details have been made public, increasing the likelihood of attack.

References