CVE-2025-2375: PHPGurukul Human Metapneumovirus Testing Management System Admin Profile Page profile.php cross site scripting
First published: Mon Mar 17 2025(Updated: )
A vulnerability, which was classified as problematic, was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected is an unknown function of the file /profile.php of the component Admin Profile Page. The manipulation of the argument email leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PHPGurukul Human Metapneumovirus | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2375?
CVE-2025-2375 has been classified as a problematic vulnerability affecting the PHPGurukul Human Metapneumovirus Testing Management System.
How do I fix CVE-2025-2375?
To fix CVE-2025-2375, ensure that the Admin Profile Page does not allow unauthorized email manipulation by sanitizing inputs and implementing proper validation.
What component is affected by CVE-2025-2375?
CVE-2025-2375 affects the Admin Profile Page component in PHPGurukul Human Metapneumovirus Testing Management System version 1.0.
What kind of vulnerability is CVE-2025-2375?
CVE-2025-2375 is a cross-site scripting (XSS) vulnerability that can be exploited through the email argument in the Admin Profile Page.
Which version of PHPGurukul is vulnerable to CVE-2025-2375?
Version 1.0 of PHPGurukul Human Metapneumovirus Testing Management System is vulnerable to CVE-2025-2375.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/description
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/author
- agent/source
- agent/tags
- agent/event
- vendor/phpgurukul
- canonical/phpgurukul human metapneumovirus