CVE-2025-11112: PHPGurukul Employee Record Management System myprofile.php cross site scripting
A security vulnerability has been detected in PHPGurukul Employee Record Management System 1.3. This impacts an unknown function of the file /myprofile.php. Such manipulation of the argument First name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11112?
CVE-2025-11112 is classified as a critical vulnerability due to its potential for remote exploitation and impact on user security.
How do I fix CVE-2025-11112?
To fix CVE-2025-11112, you should validate and sanitize user inputs, particularly the 'First name' argument in the /myprofile.php file.
What is the impact of CVE-2025-11112?
The impact of CVE-2025-11112 is the possibility of cross-site scripting (XSS) attacks, which can lead to unauthorized access and data theft.
Can CVE-2025-11112 be exploited remotely?
Yes, CVE-2025-11112 can be exploited remotely, allowing attackers to execute scripts in the context of users' sessions.
Which software is affected by CVE-2025-11112?
CVE-2025-11112 affects version 1.3 of the PHPGurukul Employee Record Management System.