CVE-2025-45007

Name of the Vulnerable Software and Affected Versions PHPGurukul Timetable Generator System version 1.0

Description A Reflected Cross-Site Scripting (XSS) issue was discovered in the profile.php file. This issue allows remote attackers to execute arbitrary JavaScript code via the adminname parameter in a POST request. The affected API endpoint is related to the profile.php file, but the exact endpoint is not specified.

Recommendations For PHPGurukul Timetable Generator System version 1.0, consider disabling the adminname parameter in the POST request to the profile.php file until a patch is available. Restrict access to the profile.php file to minimize the risk of exploitation. Avoid using the adminname parameter in the affected API endpoint until the issue is resolved.