PT-2025-26753 · Unknown · Phpgurukul Online Dj Booking Management System
CVE-2025-50695
·
Publicado
2025-06-24
·
Atualizado
2025-06-24
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
PHPGurukul Online DJ Booking Management System version 2.0
Description:
The issue concerns Cross Site Scripting (XSS) in specific API endpoints, namely "/admin/view-booking-detail.php" and "/admin/invoice-generating.php".
Recommendations:
For PHPGurukul Online DJ Booking Management System version 2.0, consider disabling access to the "/admin/view-booking-detail.php" and "/admin/invoice-generating.php" endpoints until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Phpgurukul Online Dj Booking Management System