CVE-2025-57151: XSS
Published Sep 3, 2025
·Updated
phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/userprofile.php via the fullname parameter.
Affected Software
2 affected components
Phpgurukul Complaint Management system
Phpgurukul Complaint Management system=2.0
Event History
Sep 3, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-57151?
CVE-2025-57151 is classified as a medium severity vulnerability due to its potential for exploitation leading to user data compromise.
2
How do I fix CVE-2025-57151?
To fix CVE-2025-57151, sanitize and validate the input for the fullname parameter in admin/userprofile.php to prevent XSS attacks.
3
Who is affected by CVE-2025-57151?
Users of phpgurukul Complaint Management System version 2.0 are affected by CVE-2025-57151.
4
What type of vulnerability is CVE-2025-57151?
CVE-2025-57151 is a Cross Site Scripting (XSS) vulnerability.
5
Can CVE-2025-57151 lead to unauthorized access?
Yes, CVE-2025-57151 can lead to unauthorized access as it allows attackers to execute scripts in the browser of an authenticated user.