Rumble773

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Nipah virus (NiV) Testing Management System version 1.0 **Description** A Cross-Site Scripting (XSS) issue allows attackers to execute arbitrary code via a crafted payload injected into the `State` field. This enables the execution of malicious scripts, potentially leading to unauthorized actions on the affected system. **Recommendations** For PHPGurukul Nipah virus (NiV) Testing Management System version 1.0, consider disabling the `State` field functionality until a patch is available to prevent the injection of crafted payloads. Restrict access to sensitive areas of the system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Nipah virus (NiV) Testing Management System version 1.0 **Description** The issue allows a remote attacker to escalate privileges via a crafted request to the "new-user-testing.php" endpoint. This enables the attacker to potentially gain unauthorized access to sensitive data or systems. **Recommendations** For PHPGurukul Nipah virus (NiV) Testing Management System version 1.0, consider disabling access to the "new-user-testing.php" endpoint until a patch is available to prevent exploitation. Additionally, restrict privileges for all users to minimize the risk of escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.