CVE-2025-2645: PHPGurukul Art Gallery Management System product.php cross site scripting
First published: Sun Mar 23 2025(Updated: )
A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /product.php. The manipulation of the argument artname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PHPGurukul Art Gallery Management System | ||
| PHPGurukul Art Gallery Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2645?
CVE-2025-2645 has been classified as problematic due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-2645?
To fix CVE-2025-2645, ensure proper input validation and sanitization for the 'artname' parameter in the /product.php file.
What types of attacks can CVE-2025-2645 facilitate?
CVE-2025-2645 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts into web pages.
Which specific software is affected by CVE-2025-2645?
CVE-2025-2645 affects PHPGurukul Art Gallery Management System version 1.0.
What is the impact of exploiting CVE-2025-2645?
Exploiting CVE-2025-2645 can lead to unauthorized data manipulation and user session hijacking through XSS.
- agent/references
- agent/weakness
- agent/title
- agent/first-publish-date
- agent/type
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/author
- agent/severity
- agent/event
- agent/source
- agent/tags
- agent/last-modified-date
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- vendor/phpgurukul
- canonical/phpgurukul art gallery management system
- version/phpgurukul art gallery management system/1.0