PT-2025-22665 · Unknown · Phpgurukul Medical Card Generation System
CVE-2024-51108
·
Published
2025-05-23
·
Updated
2025-05-24
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
PHPGURUKUL Medical Card Generation System version 1.0
Description
The issue concerns stored cross-site scripting (XSS) vulnerabilities in the /admin/card-bwdates-report.php component. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the
fromdate and todate parameters.Recommendations
For PHPGURUKUL Medical Card Generation System version 1.0, consider restricting access to the /admin/card-bwdates-report.php component until a patch is available. As a temporary workaround, avoid using the
fromdate and todate parameters in the affected API endpoint.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Phpgurukul Medical Card Generation System