CVE-2025-12312: PHPGurukul Curfew e-Pass Management System view-pass-detail.php cross site scripting
A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12312?
CVE-2025-12312 has a moderate severity as it allows cross-site scripting vulnerabilities that can be exploited remotely.
How do I fix CVE-2025-12312?
To fix CVE-2025-12312, validate and sanitize the input for the Fullname and Category arguments in view-pass-detail.php.
What types of attacks can CVE-2025-12312 enable?
CVE-2025-12312 can enable cross-site scripting attacks that may compromise user data or session integrity.
Which software is affected by CVE-2025-12312?
CVE-2025-12312 affects PHPGurukul Curfew e-Pass Management System version 1.0.
Is CVE-2025-12312 exploitable remotely?
Yes, CVE-2025-12312 is exploitable remotely, allowing attackers to initiate cross-site scripting attacks from outside the application.