CVE-2025-6301: PHPGurukul Notice Board System Add Notice manage-notices.php cross site scripting
A vulnerability, which was classified as problematic, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /admin/manage-notices.php of the component Add Notice. The manipulation of the argument Title/Description leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6301?
CVE-2025-6301 is classified as a problematic vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2025-6301?
To fix CVE-2025-6301, sanitize and validate all user inputs, particularly those in the Title and Description fields of the Add Notice component.
What systems are affected by CVE-2025-6301?
CVE-2025-6301 affects version 1.0 of the PHPGurukul Notice Board System.
What type of vulnerability is CVE-2025-6301?
CVE-2025-6301 is a cross-site scripting (XSS) vulnerability that can be exploited through improper handling of user inputs.
Is there a patch available for CVE-2025-6301?
As of now, there is no official patch for CVE-2025-6301, so manual code adjustments and best practices are recommended to mitigate the risk.