PT-2025-35615
CVE-2025-9834
·
Published
2025-09-02
·
Updated
2025-09-05
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
PHPGurukul Small CRM version 4.0
Description
A flaw exists in PHPGurukul Small CRM 4.0 within an unknown functionality of the
/registration.php file. Manipulation of the Username parameter can lead to cross-site scripting, allowing for remote attacks. The exploit has been published.Recommendations
Apply any available updates or patches for PHPGurukul Small CRM version 4.0.
As a temporary workaround, sanitize or restrict the input accepted by the
Username parameter in the /registration.php file.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾