CVE-2025-61255: XSS

Published Oct 21, 2025

Updated

Bank Locker Management System by PHPGurukul is affected by a Cross-Site Scripting (XSS) vulnerability via the /search parameter, where unsanitized input allows arbitrary HTML and JavaScript injection, potentially resulting in information disclosure and user redirection.

Affected Software

2 affected components

Phpgurukul Bank Locker Management System

Event History

Oct 21, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:21 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-61255?

CVE-2025-61255 has been classified as a high severity Cross-Site Scripting (XSS) vulnerability.

How do I fix CVE-2025-61255?

To fix CVE-2025-61255, sanitize user inputs in the /search parameter to prevent HTML and JavaScript injection.

What impact does CVE-2025-61255 have on users?

CVE-2025-61255 can lead to information disclosure and active user redirection, potentially compromising user security.

What systems are affected by CVE-2025-61255?

CVE-2025-61255 affects the PHPGurukul Bank Locker Management System.

Is CVE-2025-61255 easy to exploit?

Yes, CVE-2025-61255 is considered to be easily exploitable due to the lack of input validation.